Warning: Permanently added '[localhost]:38083' (ECDSA) to the list of known hosts. 2025/08/29 08:33:01 fuzzer started 2025/08/29 08:33:01 dialing manager at localhost:43077 syzkaller login: [ 50.819368] cgroup: Unknown subsys name 'net' [ 50.882972] cgroup: Unknown subsys name 'cpuset' [ 50.900510] cgroup: Unknown subsys name 'rlimit' 2025/08/29 08:33:11 syscalls: 2214 2025/08/29 08:33:11 code coverage: enabled 2025/08/29 08:33:11 comparison tracing: enabled 2025/08/29 08:33:11 extra coverage: enabled 2025/08/29 08:33:11 setuid sandbox: enabled 2025/08/29 08:33:11 namespace sandbox: enabled 2025/08/29 08:33:11 Android sandbox: enabled 2025/08/29 08:33:11 fault injection: enabled 2025/08/29 08:33:11 leak checking: enabled 2025/08/29 08:33:11 net packet injection: enabled 2025/08/29 08:33:11 net device setup: enabled 2025/08/29 08:33:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:33:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:33:11 USB emulation: enabled 2025/08/29 08:33:11 hci packet injection: enabled 2025/08/29 08:33:11 wifi device emulation: enabled 2025/08/29 08:33:11 802.15.4 emulation: enabled 2025/08/29 08:33:11 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 08:33:11 fetching corpus: 46, signal 21546/24667 (executing program) 2025/08/29 08:33:12 fetching corpus: 96, signal 39560/43195 (executing program) 2025/08/29 08:33:12 fetching corpus: 146, signal 44431/48883 (executing program) 2025/08/29 08:33:12 fetching corpus: 196, signal 50982/55906 (executing program) 2025/08/29 08:33:12 fetching corpus: 246, signal 58393/63329 (executing program) 2025/08/29 08:33:12 fetching corpus: 296, signal 62210/67453 (executing program) 2025/08/29 08:33:12 fetching corpus: 346, signal 65935/71296 (executing program) 2025/08/29 08:33:12 fetching corpus: 396, signal 69116/74648 (executing program) 2025/08/29 08:33:13 fetching corpus: 446, signal 72058/77589 (executing program) 2025/08/29 08:33:13 fetching corpus: 496, signal 73824/79482 (executing program) 2025/08/29 08:33:13 fetching corpus: 546, signal 76578/82070 (executing program) 2025/08/29 08:33:13 fetching corpus: 596, signal 78848/84293 (executing program) 2025/08/29 08:33:13 fetching corpus: 646, signal 80222/85670 (executing program) 2025/08/29 08:33:13 fetching corpus: 696, signal 81808/87146 (executing program) 2025/08/29 08:33:13 fetching corpus: 746, signal 85022/89704 (executing program) 2025/08/29 08:33:13 fetching corpus: 796, signal 87406/91553 (executing program) 2025/08/29 08:33:14 fetching corpus: 846, signal 89253/92997 (executing program) 2025/08/29 08:33:14 fetching corpus: 896, signal 91426/94840 (executing program) 2025/08/29 08:33:14 fetching corpus: 946, signal 93279/96156 (executing program) 2025/08/29 08:33:14 fetching corpus: 996, signal 94902/97267 (executing program) 2025/08/29 08:33:14 fetching corpus: 1046, signal 96692/98521 (executing program) 2025/08/29 08:33:14 fetching corpus: 1096, signal 98293/99463 (executing program) 2025/08/29 08:33:14 fetching corpus: 1107, signal 98593/99663 (executing program) 2025/08/29 08:33:14 fetching corpus: 1107, signal 98593/99699 (executing program) 2025/08/29 08:33:14 fetching corpus: 1107, signal 98593/99751 (executing program) 2025/08/29 08:33:14 fetching corpus: 1107, signal 98593/99804 (executing program) 2025/08/29 08:33:14 fetching corpus: 1107, signal 98593/99846 (executing program) 2025/08/29 08:33:14 fetching corpus: 1107, signal 98593/99892 (executing program) 2025/08/29 08:33:14 fetching corpus: 1107, signal 98593/99935 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/99972 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100016 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100069 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100122 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100163 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100212 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100248 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100290 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100346 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100384 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100426 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100479 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100521 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100562 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100598 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100653 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100691 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100737 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100771 (executing program) 2025/08/29 08:33:15 fetching corpus: 1107, signal 98593/100771 (executing program) 2025/08/29 08:33:17 starting 8 fuzzer processes 08:33:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_hci(r0, 0x88, 0x1, 0x0, &(0x7f0000001580)) 08:33:17 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f0000000040)) 08:33:17 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000480)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x18, 0x0, 0x0, @local, @local, {[@dstopts={0x0, 0x1, '\x00', [@ra, @calipso={0x7, 0x8}]}]}}}}}, 0x0) [ 66.561158] audit: type=1400 audit(1756456397.552:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:33:17 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc20066, r2}) 08:33:17 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000001040)={{0x0, 0x7}}) 08:33:17 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000a40)=@md0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='hugetlbfs\x00', 0x0, 0x0) 08:33:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161120000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100063e870325132510000e87032510300000000002e2e202020202020202020100063e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200063e870325132510000e870325104001a040000", 0x80, 0x12800}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x13000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0x13800}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x16800}], 0x0, &(0x7f0000011200)) 08:33:17 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed}}}, 0x14) [ 67.707978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.711646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.713477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.716752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.719598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.777964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.784193] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.787585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.793724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.800650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.910993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.920631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.937366] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.944802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.947375] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.041786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.043960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.044135] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.047453] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.050715] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.059653] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.062961] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.063026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.067144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.070591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.095883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.101091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.109925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.112422] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.119809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.129699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.138873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.151201] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.152907] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.155860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.161552] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.177654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.198729] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.205933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.213602] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.740778] Bluetooth: hci0: command tx timeout [ 69.869377] Bluetooth: hci1: command tx timeout [ 69.996458] Bluetooth: hci2: command tx timeout [ 70.124414] Bluetooth: hci6: command tx timeout [ 70.188478] Bluetooth: hci4: command tx timeout [ 70.253337] Bluetooth: hci3: command tx timeout [ 70.318335] Bluetooth: hci5: command tx timeout [ 70.318875] Bluetooth: hci7: command tx timeout [ 71.789624] Bluetooth: hci0: command tx timeout [ 71.917368] Bluetooth: hci1: command tx timeout [ 72.045672] Bluetooth: hci2: command tx timeout [ 72.173604] Bluetooth: hci6: command tx timeout [ 72.237438] Bluetooth: hci4: command tx timeout [ 72.301494] Bluetooth: hci3: command tx timeout [ 72.365680] Bluetooth: hci7: command tx timeout [ 72.366825] Bluetooth: hci5: command tx timeout [ 73.836758] Bluetooth: hci0: command tx timeout [ 73.964388] Bluetooth: hci1: command tx timeout [ 74.092529] Bluetooth: hci2: command tx timeout [ 74.221349] Bluetooth: hci6: command tx timeout [ 74.284386] Bluetooth: hci4: command tx timeout [ 74.350331] Bluetooth: hci3: command tx timeout [ 74.412518] Bluetooth: hci5: command tx timeout [ 74.413483] Bluetooth: hci7: command tx timeout [ 75.885491] Bluetooth: hci0: command tx timeout [ 76.012365] Bluetooth: hci1: command tx timeout [ 76.140364] Bluetooth: hci2: command tx timeout [ 76.268382] Bluetooth: hci6: command tx timeout [ 76.332368] Bluetooth: hci4: command tx timeout [ 76.396551] Bluetooth: hci3: command tx timeout [ 76.460397] Bluetooth: hci7: command tx timeout [ 76.460423] Bluetooth: hci5: command tx timeout [ 107.539603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.540254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.827892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.828529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:33:59 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000480)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x18, 0x0, 0x0, @local, @local, {[@dstopts={0x0, 0x1, '\x00', [@ra, @calipso={0x7, 0x8}]}]}}}}}, 0x0) [ 108.736603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.737967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:33:59 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000480)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x18, 0x0, 0x0, @local, @local, {[@dstopts={0x0, 0x1, '\x00', [@ra, @calipso={0x7, 0x8}]}]}}}}}, 0x0) 08:33:59 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000480)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x18, 0x0, 0x0, @local, @local, {[@dstopts={0x0, 0x1, '\x00', [@ra, @calipso={0x7, 0x8}]}]}}}}}, 0x0) [ 109.144023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.144666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:34:00 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0x0}, @mcast1={0x0}}}}}}}, 0x0) 08:34:00 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0x0}, @mcast1={0x0}}}}}}}, 0x0) 08:34:00 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0x0}, @mcast1={0x0}}}}}}}, 0x0) [ 109.519352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.519962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:34:00 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0x0}, @mcast1={0x0}}}}}}}, 0x0) [ 109.645388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.646003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:34:00 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000001040)={{0x0, 0x7}}) [ 109.776276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.777211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.876731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.877344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.967645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.969084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.990378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.990960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.008193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.008819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.122266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.123654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.198524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.199660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.226426] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.240685] loop3: detected capacity change from 0 to 360 [ 110.301923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.303266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.315172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.316053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.389077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.389989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.531115] loop1: detected capacity change from 0 to 136 [ 110.542775] isofs_fill_super: get root inode failed [ 110.547246] loop1: detected capacity change from 0 to 136 [ 110.551551] isofs_fill_super: get root inode failed 08:34:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_hci(r0, 0x88, 0x1, 0x0, &(0x7f0000001580)) 08:34:01 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed}}}, 0x14) 08:34:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161120000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100063e870325132510000e87032510300000000002e2e202020202020202020100063e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200063e870325132510000e870325104001a040000", 0x80, 0x12800}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x13000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0x13800}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x16800}], 0x0, &(0x7f0000011200)) 08:34:01 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f0000000040)) 08:34:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xc) 08:34:01 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000a40)=@md0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='hugetlbfs\x00', 0x0, 0x0) 08:34:01 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000001040)={{0x0, 0x7}}) 08:34:01 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 110.725510] loop1: detected capacity change from 0 to 136 [ 110.737269] isofs_fill_super: get root inode failed [ 110.743746] loop3: detected capacity change from 0 to 360 08:34:01 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000001040)={{0x0, 0x7}}) 08:34:01 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed}}}, 0x14) 08:34:01 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000a40)=@md0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='hugetlbfs\x00', 0x0, 0x0) 08:34:01 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f0000000040)) 08:34:01 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 110.874570] loop1: detected capacity change from 0 to 136 [ 110.888073] isofs_fill_super: get root inode failed 08:34:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_hci(r0, 0x88, 0x1, 0x0, &(0x7f0000001580)) 08:34:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xc) 08:34:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161120000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100063e870325132510000e87032510300000000002e2e202020202020202020100063e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200063e870325132510000e870325104001a040000", 0x80, 0x12800}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x13000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0x13800}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x16800}], 0x0, &(0x7f0000011200)) 08:34:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xc) 08:34:01 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000a40)=@md0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='hugetlbfs\x00', 0x0, 0x0) 08:34:01 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f0000000040)) 08:34:01 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 08:34:01 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed}}}, 0x14) [ 111.017058] loop3: detected capacity change from 0 to 360 [ 111.059701] loop1: detected capacity change from 0 to 136 08:34:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_hci(r0, 0x88, 0x1, 0x0, &(0x7f0000001580)) 08:34:02 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000a40)=@md0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='hugetlbfs\x00', 0x0, 0x0) [ 111.089762] isofs_fill_super: get root inode failed 08:34:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161120000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100063e870325132510000e87032510300000000002e2e202020202020202020100063e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200063e870325132510000e870325104001a040000", 0x80, 0x12800}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x13000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0x13800}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x16800}], 0x0, &(0x7f0000011200)) 08:34:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xc) [ 111.140843] kmemleak: Found object by alias at 0x607f1a639a4c [ 111.140870] CPU: 1 UID: 0 PID: 3951 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.140902] Tainted: [W]=WARN [ 111.140909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.140921] Call Trace: [ 111.140928] [ 111.140935] dump_stack_lvl+0xca/0x120 [ 111.140973] __lookup_object+0x94/0xb0 [ 111.141002] delete_object_full+0x27/0x70 [ 111.141030] free_percpu+0x30/0x1160 [ 111.141058] ? arch_uprobe_clear_state+0x16/0x140 [ 111.141093] futex_hash_free+0x38/0xc0 [ 111.141117] mmput+0x2d3/0x390 [ 111.141149] do_exit+0x79d/0x2970 [ 111.141180] ? __pfx_do_exit+0x10/0x10 [ 111.141205] ? find_held_lock+0x2b/0x80 [ 111.141236] ? get_signal+0x835/0x2340 [ 111.141272] do_group_exit+0xd3/0x2a0 [ 111.141305] get_signal+0x2315/0x2340 [ 111.141337] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 111.141366] ? __pfx_get_signal+0x10/0x10 [ 111.141395] ? __schedule+0xe91/0x3590 [ 111.141430] arch_do_signal_or_restart+0x80/0x790 [ 111.141460] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.141490] ? __x64_sys_futex+0x1c9/0x4d0 [ 111.141512] ? __x64_sys_futex+0x1d2/0x4d0 [ 111.141539] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.141572] exit_to_user_mode_loop+0x8b/0x110 [ 111.141594] do_syscall_64+0x2f7/0x360 [ 111.141615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.141636] RIP: 0033:0x7f0f18dfdb19 [ 111.141652] Code: Unable to access opcode bytes at 0x7f0f18dfdaef. [ 111.141661] RSP: 002b:00007f0f16373218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.141681] RAX: 0000000000000001 RBX: 00007f0f18f10f68 RCX: 00007f0f18dfdb19 [ 111.141694] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f18f10f6c [ 111.141707] RBP: 00007f0f18f10f60 R08: 000000000000000e R09: 0000000000000000 [ 111.141719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f18f10f6c [ 111.141731] R13: 00007fff131d684f R14: 00007f0f16373300 R15: 0000000000022000 [ 111.141760] [ 111.141766] kmemleak: Object (percpu) 0x607f1a639a44 (size 16): [ 111.141779] kmemleak: comm "syz-executor.0", pid 277, jiffies 4294777736 [ 111.141791] kmemleak: min_count = 1 [ 111.141798] kmemleak: count = 0 [ 111.141805] kmemleak: flags = 0x21 [ 111.141811] kmemleak: checksum = 0 [ 111.141818] kmemleak: backtrace: [ 111.141824] pcpu_alloc_noprof+0x87a/0x1170 [ 111.141851] __percpu_counter_init_many+0x44/0x360 [ 111.141873] mm_init+0xcac/0x1170 [ 111.141887] copy_process+0x3ab7/0x73c0 [ 111.141905] kernel_clone+0xea/0x7f0 [ 111.141923] __do_sys_clone+0xce/0x120 [ 111.141941] do_syscall_64+0xbf/0x360 [ 111.141956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.167020] loop3: detected capacity change from 0 to 360 [ 111.187706] kmemleak: Found object by alias at 0x607f1a639a48 [ 111.187731] CPU: 1 UID: 0 PID: 3954 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.187764] Tainted: [W]=WARN [ 111.187772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.187785] Call Trace: [ 111.187792] [ 111.187801] dump_stack_lvl+0xca/0x120 [ 111.187836] __lookup_object+0x94/0xb0 [ 111.187863] delete_object_full+0x27/0x70 [ 111.187891] free_percpu+0x30/0x1160 [ 111.187918] ? arch_uprobe_clear_state+0x16/0x140 [ 111.187952] futex_hash_free+0x38/0xc0 [ 111.187975] mmput+0x2d3/0x390 [ 111.188007] do_exit+0x79d/0x2970 [ 111.188030] ? lock_release+0xc8/0x290 [ 111.188059] ? __pfx_do_exit+0x10/0x10 [ 111.188085] ? find_held_lock+0x2b/0x80 [ 111.188114] ? get_signal+0x835/0x2340 [ 111.188148] do_group_exit+0xd3/0x2a0 [ 111.188175] get_signal+0x2315/0x2340 [ 111.188207] ? __virt_addr_valid+0x100/0x5d0 [ 111.188246] ? __pfx_get_signal+0x10/0x10 [ 111.188276] ? do_futex+0x135/0x370 [ 111.188308] ? __pfx_do_futex+0x10/0x10 [ 111.188330] ? putname.part.0+0x11b/0x160 [ 111.188361] arch_do_signal_or_restart+0x80/0x790 [ 111.188392] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.188421] ? __x64_sys_futex+0x1c9/0x4d0 [ 111.188443] ? __x64_sys_futex+0x1d2/0x4d0 [ 111.188470] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.188496] ? syscall_user_dispatch+0x78/0x140 [ 111.188524] exit_to_user_mode_loop+0x8b/0x110 [ 111.188546] do_syscall_64+0x2f7/0x360 [ 111.188566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.188586] RIP: 0033:0x7f1ef3f1eb19 [ 111.188601] Code: Unable to access opcode bytes at 0x7f1ef3f1eaef. [ 111.188611] RSP: 002b:00007f1ef1494218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.188631] RAX: fffffffffffffe00 RBX: 00007f1ef4031f68 RCX: 00007f1ef3f1eb19 [ 111.188645] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1ef4031f68 [ 111.188657] RBP: 00007f1ef4031f60 R08: 0000000000000000 R09: 0000000000000000 [ 111.188670] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ef4031f6c [ 111.188682] R13: 00007ffcbf24389f R14: 00007f1ef1494300 R15: 0000000000022000 [ 111.188711] [ 111.188717] kmemleak: Object (percpu) 0x607f1a639a44 (size 16): [ 111.188729] kmemleak: comm "syz-executor.0", pid 277, jiffies 4294777736 [ 111.188741] kmemleak: min_count = 1 [ 111.188748] kmemleak: count = 0 [ 111.188755] kmemleak: flags = 0x21 [ 111.188762] kmemleak: checksum = 0 [ 111.188768] kmemleak: backtrace: [ 111.188773] pcpu_alloc_noprof+0x87a/0x1170 [ 111.188800] __percpu_counter_init_many+0x44/0x360 [ 111.188822] mm_init+0xcac/0x1170 [ 111.188836] copy_process+0x3ab7/0x73c0 [ 111.188854] kernel_clone+0xea/0x7f0 [ 111.188872] __do_sys_clone+0xce/0x120 [ 111.188890] do_syscall_64+0xbf/0x360 [ 111.188905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.198895] BUG: Bad rss-counter state mm:00000000e591fdb7 type:MM_ANONPAGES val:-2 Comm:syz-executor.0 Pid:3957 [ 111.217649] BUG: Bad rss-counter state mm:0000000086c12c89 type:MM_FILEPAGES val:-33 Comm:syz-executor.1 Pid:3945 [ 111.233807] BUG: Bad rss-counter state mm:0000000086c12c89 type:MM_ANONPAGES val:-57 Comm:syz-executor.1 Pid:3945 08:34:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xc) 08:34:02 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 08:34:02 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000a40)=@md0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='hugetlbfs\x00', 0x0, 0x0) 08:34:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xc) 08:34:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 111.461936] audit: type=1400 audit(1756456442.452:8): avc: denied { open } for pid=3970 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.491053] audit: type=1400 audit(1756456442.452:9): avc: denied { kernel } for pid=3970 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:34:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xc) 08:34:02 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000a40)=@md0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='hugetlbfs\x00', 0x0, 0x0) 08:34:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:34:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x5606, 0x0) 08:34:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) 08:34:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x5606, 0x0) 08:34:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:34:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x5606, 0x0) 08:34:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) 08:34:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x5606, 0x0) 08:34:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:34:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) 08:34:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) [ 112.190917] kmemleak: Found object by alias at 0x607f1a639a50 [ 112.190949] CPU: 0 UID: 0 PID: 3994 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.190992] Tainted: [W]=WARN [ 112.190999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.191011] Call Trace: [ 112.191019] [ 112.191027] dump_stack_lvl+0xca/0x120 [ 112.191068] __lookup_object+0x94/0xb0 [ 112.191098] delete_object_full+0x27/0x70 [ 112.191129] free_percpu+0x30/0x1160 [ 112.191158] ? arch_uprobe_clear_state+0x16/0x140 [ 112.191195] futex_hash_free+0x38/0xc0 [ 112.191221] mmput+0x2d3/0x390 [ 112.191256] do_exit+0x79d/0x2970 [ 112.191282] ? signal_wake_up_state+0x85/0x120 [ 112.191312] ? zap_other_threads+0x2b9/0x3a0 [ 112.191342] ? __pfx_do_exit+0x10/0x10 [ 112.191366] ? do_group_exit+0x1c3/0x2a0 [ 112.191392] ? lock_release+0xc8/0x290 [ 112.191424] do_group_exit+0xd3/0x2a0 [ 112.191453] __x64_sys_exit_group+0x3e/0x50 [ 112.191479] x64_sys_call+0x18c5/0x18d0 [ 112.191508] do_syscall_64+0xbf/0x360 [ 112.191530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.191552] RIP: 0033:0x7f77a7bf8b19 [ 112.191568] Code: Unable to access opcode bytes at 0x7f77a7bf8aef. [ 112.191578] RSP: 002b:00007fff45b5fee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 112.191600] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f77a7bf8b19 [ 112.191615] RDX: 00007f77a7bab72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 112.191628] RBP: 0000000000000000 R08: 0000001b2d32924c R09: 0000000000000000 [ 112.191641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.191655] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff45b5ffd0 [ 112.191685] [ 112.191692] kmemleak: Object (percpu) 0x607f1a639a44 (size 16): [ 112.191705] kmemleak: comm "syz-executor.1", pid 275, jiffies 4294778805 [ 112.191718] kmemleak: min_count = 1 [ 112.191725] kmemleak: count = 0 [ 112.191732] kmemleak: flags = 0x21 [ 112.191739] kmemleak: checksum = 0 [ 112.191747] kmemleak: backtrace: [ 112.191753] pcpu_alloc_noprof+0x87a/0x1170 [ 112.191782] __percpu_counter_init_many+0x44/0x360 [ 112.191805] mm_init+0xcac/0x1170 [ 112.191821] copy_process+0x3ab7/0x73c0 [ 112.191840] kernel_clone+0xea/0x7f0 [ 112.191859] __do_sys_clone+0xce/0x120 [ 112.191878] do_syscall_64+0xbf/0x360 [ 112.191894] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:34:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) 08:34:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) 08:34:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x34}}, 0x0) 08:34:03 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x5390, &(0x7f0000000400)={0x0, 0xff}) 08:34:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000016c0)=""/4096) 08:34:03 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$DVD_AUTH(r0, 0x5303, &(0x7f0000000140)=@lsc={0x3, 0x0, "8c2e9c993edfe1625d5a"}) 08:34:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) capget(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/103, 0x67}, {0x0}, {0x0}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x12060, &(0x7f0000000300)) capset(&(0x7f0000000340)={0x0, r0}, &(0x7f0000000380)={0x0, 0x100, 0x2, 0x101, 0x0, 0x3ed}) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 112.396158] kmemleak: Found object by alias at 0x607f1a639a50 [ 112.396189] CPU: 1 UID: 0 PID: 4002 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.396224] Tainted: [W]=WARN [ 112.396231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.396244] Call Trace: [ 112.396252] [ 112.396260] dump_stack_lvl+0xca/0x120 [ 112.396312] __lookup_object+0x94/0xb0 [ 112.396344] delete_object_full+0x27/0x70 [ 112.396375] free_percpu+0x30/0x1160 [ 112.396405] ? arch_uprobe_clear_state+0x16/0x140 [ 112.396443] futex_hash_free+0x38/0xc0 [ 112.396469] mmput+0x2d3/0x390 [ 112.396504] do_exit+0x79d/0x2970 [ 112.396530] ? signal_wake_up_state+0x85/0x120 [ 112.396560] ? zap_other_threads+0x2b9/0x3a0 [ 112.396591] ? __pfx_do_exit+0x10/0x10 [ 112.396615] ? do_group_exit+0x1c3/0x2a0 [ 112.396642] ? lock_release+0xc8/0x290 [ 112.396673] do_group_exit+0xd3/0x2a0 [ 112.396702] __x64_sys_exit_group+0x3e/0x50 [ 112.396729] x64_sys_call+0x18c5/0x18d0 [ 112.396758] do_syscall_64+0xbf/0x360 [ 112.396781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.396803] RIP: 0033:0x7f77a7bf8b19 [ 112.396820] Code: Unable to access opcode bytes at 0x7f77a7bf8aef. [ 112.396830] RSP: 002b:00007fff45b5fee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 112.396852] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f77a7bf8b19 [ 112.396867] RDX: 00007f77a7bab72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 112.396881] RBP: 0000000000000000 R08: 0000001b2d328e30 R09: 0000000000000000 [ 112.396895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.396908] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff45b5ffd0 [ 112.396938] [ 112.396945] kmemleak: Object (percpu) 0x607f1a639a44 (size 16): [ 112.396959] kmemleak: comm "syz-executor.3", pid 286, jiffies 4294778953 [ 112.396972] kmemleak: min_count = 1 [ 112.396980] kmemleak: count = 0 [ 112.396987] kmemleak: flags = 0x21 [ 112.396995] kmemleak: checksum = 0 [ 112.397002] kmemleak: backtrace: [ 112.397008] pcpu_alloc_noprof+0x87a/0x1170 [ 112.397037] __percpu_counter_init_many+0x44/0x360 [ 112.397061] mm_init+0xcac/0x1170 [ 112.397077] copy_process+0x3ab7/0x73c0 [ 112.397096] kernel_clone+0xea/0x7f0 [ 112.397115] __do_sys_clone+0xce/0x120 [ 112.397135] do_syscall_64+0xbf/0x360 [ 112.397152] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:34:03 executing program 5: clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/7, 0x980c1484117554e9, &(0x7f00000004c0)=""/163, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 08:34:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) 08:34:03 executing program 5: clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/7, 0x980c1484117554e9, &(0x7f00000004c0)=""/163, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 08:34:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x34}}, 0x0) [ 112.620988] kmemleak: Found object by alias at 0x607f1a639a48 [ 112.621019] CPU: 1 UID: 0 PID: 4017 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.621054] Tainted: [W]=WARN [ 112.621062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.621075] Call Trace: [ 112.621082] [ 112.621091] dump_stack_lvl+0xca/0x120 [ 112.621134] __lookup_object+0x94/0xb0 [ 112.621166] delete_object_full+0x27/0x70 [ 112.621197] free_percpu+0x30/0x1160 [ 112.621227] ? arch_uprobe_clear_state+0x16/0x140 [ 112.621265] futex_hash_free+0x38/0xc0 [ 112.621292] mmput+0x2d3/0x390 [ 112.621336] do_exit+0x79d/0x2970 [ 112.621363] ? lock_release+0xc8/0x290 [ 112.621391] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.621430] ? __pfx_do_exit+0x10/0x10 [ 112.621457] ? find_held_lock+0x2b/0x80 [ 112.621490] ? get_signal+0x835/0x2340 [ 112.621527] do_group_exit+0xd3/0x2a0 [ 112.621556] get_signal+0x2315/0x2340 [ 112.621600] ? __pfx_get_signal+0x10/0x10 [ 112.621632] ? do_futex+0x135/0x370 [ 112.621659] ? __pfx_do_futex+0x10/0x10 [ 112.621682] ? lock_acquire+0x15e/0x2f0 [ 112.621711] arch_do_signal_or_restart+0x80/0x790 [ 112.621744] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.621777] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.621815] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.621853] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.621889] exit_to_user_mode_loop+0x8b/0x110 [ 112.621913] do_syscall_64+0x2f7/0x360 [ 112.621936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.621959] RIP: 0033:0x7f1ef3f1eb19 [ 112.621976] Code: Unable to access opcode bytes at 0x7f1ef3f1eaef. [ 112.621985] RSP: 002b:00007f1ef1494218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.622007] RAX: fffffffffffffe00 RBX: 00007f1ef4031f68 RCX: 00007f1ef3f1eb19 [ 112.622022] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1ef4031f68 [ 112.622036] RBP: 00007f1ef4031f60 R08: 0000000000000000 R09: 0000000000000000 [ 112.622050] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ef4031f6c [ 112.622063] R13: 00007ffcbf24389f R14: 00007f1ef1494300 R15: 0000000000022000 [ 112.622095] [ 112.622102] kmemleak: Object (percpu) 0x607f1a639a44 (size 16): [ 112.622115] kmemleak: comm "syz-executor.5", pid 287, jiffies 4294779216 [ 112.622129] kmemleak: min_count = 1 [ 112.622136] kmemleak: count = 0 [ 112.622143] kmemleak: flags = 0x21 [ 112.622151] kmemleak: checksum = 0 [ 112.622158] kmemleak: backtrace: [ 112.622164] pcpu_alloc_noprof+0x87a/0x1170 [ 112.622192] __percpu_counter_init_many+0x44/0x360 [ 112.622216] mm_init+0xcac/0x1170 [ 112.622232] copy_process+0x3ab7/0x73c0 [ 112.622251] kernel_clone+0xea/0x7f0 [ 112.622270] __do_sys_clone+0xce/0x120 [ 112.622290] do_syscall_64+0xbf/0x360 [ 112.622306] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:34:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) capget(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/103, 0x67}, {0x0}, {0x0}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x12060, &(0x7f0000000300)) capset(&(0x7f0000000340)={0x0, r0}, &(0x7f0000000380)={0x0, 0x100, 0x2, 0x101, 0x0, 0x3ed}) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 112.839111] kmemleak: Found object by alias at 0x607f1a639a50 [ 112.839138] CPU: 1 UID: 0 PID: 4030 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.839173] Tainted: [W]=WARN [ 112.839180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.839194] Call Trace: [ 112.839201] [ 112.839210] dump_stack_lvl+0xca/0x120 [ 112.839250] __lookup_object+0x94/0xb0 [ 112.839281] delete_object_full+0x27/0x70 [ 112.839319] free_percpu+0x30/0x1160 [ 112.839349] ? arch_uprobe_clear_state+0x16/0x140 [ 112.839387] futex_hash_free+0x38/0xc0 [ 112.839413] mmput+0x2d3/0x390 [ 112.839448] do_exit+0x79d/0x2970 [ 112.839474] ? lock_release+0xc8/0x290 [ 112.839503] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.839543] ? __pfx_do_exit+0x10/0x10 [ 112.839569] ? find_held_lock+0x2b/0x80 [ 112.839602] ? get_signal+0x835/0x2340 [ 112.839640] do_group_exit+0xd3/0x2a0 [ 112.839668] get_signal+0x2315/0x2340 [ 112.839714] ? __pfx_get_signal+0x10/0x10 [ 112.839746] ? do_futex+0x135/0x370 [ 112.839773] ? __pfx_do_futex+0x10/0x10 [ 112.839802] arch_do_signal_or_restart+0x80/0x790 [ 112.839836] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.839868] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.839906] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.839944] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.839968] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 112.840003] exit_to_user_mode_loop+0x8b/0x110 [ 112.840027] do_syscall_64+0x2f7/0x360 [ 112.840050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.840072] RIP: 0033:0x7f77a7bf8b19 [ 112.840089] Code: Unable to access opcode bytes at 0x7f77a7bf8aef. [ 112.840099] RSP: 002b:00007f77a516e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.840121] RAX: fffffffffffffe00 RBX: 00007f77a7d0bf68 RCX: 00007f77a7bf8b19 [ 112.840135] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f77a7d0bf68 [ 112.840149] RBP: 00007f77a7d0bf60 R08: 0000000000000000 R09: 0000000000000000 [ 112.840163] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77a7d0bf6c [ 112.840176] R13: 00007fff45b5fcbf R14: 00007f77a516e300 R15: 0000000000022000 [ 112.840207] [ 112.840215] kmemleak: Object (percpu) 0x607f1a639a4c (size 8): [ 112.840227] kmemleak: comm "syz-executor.0", pid 4034, jiffies 4294779472 [ 112.840241] kmemleak: min_count = 1 [ 112.840249] kmemleak: count = 0 [ 112.840256] kmemleak: flags = 0x21 [ 112.840263] kmemleak: checksum = 0 [ 112.840270] kmemleak: backtrace: [ 112.840277] pcpu_alloc_noprof+0x87a/0x1170 [ 112.840306] alloc_vfsmnt+0x135/0x6e0 [ 112.840331] clone_mnt+0x6c/0xb70 [ 112.840358] copy_tree+0x34b/0xaf0 [ 112.840377] copy_mnt_ns+0x1ab/0xab0 [ 112.840398] create_new_namespaces+0xd6/0xab0 [ 112.840429] copy_namespaces+0x45c/0x580 [ 112.840458] copy_process+0x2649/0x73c0 [ 112.840477] kernel_clone+0xea/0x7f0 [ 112.840496] __do_sys_clone3+0x1f5/0x280 [ 112.840516] do_syscall_64+0xbf/0x360 [ 112.840532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.900855] kmemleak: Cannot insert 0x607f1a639a50 into the object search tree (overlaps existing) [ 112.900890] CPU: 0 UID: 0 PID: 4034 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.900927] Tainted: [W]=WARN [ 112.900934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.900948] Call Trace: [ 112.900955] [ 112.900965] dump_stack_lvl+0xca/0x120 [ 112.901008] __link_object+0x190/0x210 [ 112.901042] __create_object+0x48/0x80 [ 112.901077] pcpu_alloc_noprof+0x87a/0x1170 [ 112.901125] __percpu_counter_init_many+0x44/0x360 [ 112.901157] ? __pfx_xfrm6_net_init+0x10/0x10 [ 112.901194] xfrm6_net_init+0x4e/0x1a0 [ 112.901228] ? __pfx_xfrm6_net_init+0x10/0x10 [ 112.901261] ops_init+0x1e1/0x650 [ 112.901311] setup_net+0x10d/0x320 [ 112.901344] ? lockdep_init_map_type+0x4b/0x240 [ 112.901375] ? __pfx_setup_net+0x10/0x10 [ 112.901413] ? debug_mutex_init+0x37/0x70 [ 112.901453] copy_net_ns+0x2e3/0x650 [ 112.901478] create_new_namespaces+0x3f6/0xab0 [ 112.901523] copy_namespaces+0x45c/0x580 [ 112.901560] copy_process+0x2649/0x73c0 [ 112.901584] ? lock_release+0xc8/0x290 [ 112.901624] ? __pfx_copy_process+0x10/0x10 [ 112.901649] ? __might_fault+0xe0/0x190 [ 112.901682] ? _copy_from_user+0x5b/0xd0 [ 112.901716] kernel_clone+0xea/0x7f0 [ 112.901743] ? __pfx_kernel_clone+0x10/0x10 [ 112.901777] ? __pfx_futex_wake+0x10/0x10 [ 112.901816] __do_sys_clone3+0x1f5/0x280 [ 112.901840] ? __pfx___do_sys_clone3+0x10/0x10 [ 112.901885] ? perf_trace_preemptirq_template+0x259/0x430 [ 112.901925] ? __x64_sys_futex+0x1c9/0x4d0 [ 112.901950] ? __x64_sys_futex+0x1d2/0x4d0 [ 112.901978] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.902021] ? xfd_validate_state+0x55/0x180 [ 112.902066] do_syscall_64+0xbf/0x360 [ 112.902089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.902113] RIP: 0033:0x7f0795e37b19 [ 112.902131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.902152] RSP: 002b:00007f07933ad188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 112.902175] RAX: ffffffffffffffda RBX: 00007f0795f4af60 RCX: 00007f0795e37b19 [ 112.902191] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 112.902205] RBP: 00007f0795e91f6d R08: 0000000000000000 R09: 0000000000000000 [ 112.902218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.902232] R13: 00007ffdc583394f R14: 00007f07933ad300 R15: 0000000000022000 [ 112.902264] [ 112.902872] kmemleak: Kernel memory leak detector disabled [ 112.902880] kmemleak: Object (percpu) 0x607f1a639a4c (size 8): [ 112.902894] kmemleak: comm "syz-executor.0", pid 4034, jiffies 4294779472 [ 112.902908] kmemleak: min_count = 1 [ 112.902915] kmemleak: count = 0 [ 112.902923] kmemleak: flags = 0x21 [ 112.902930] kmemleak: checksum = 0 [ 112.902938] kmemleak: backtrace: [ 112.902944] pcpu_alloc_noprof+0x87a/0x1170 [ 112.902974] alloc_vfsmnt+0x135/0x6e0 [ 112.903001] clone_mnt+0x6c/0xb70 [ 112.903029] copy_tree+0x34b/0xaf0 [ 112.903048] copy_mnt_ns+0x1ab/0xab0 [ 112.903070] create_new_namespaces+0xd6/0xab0 [ 112.903101] copy_namespaces+0x45c/0x580 [ 112.903132] copy_process+0x2649/0x73c0 [ 112.903152] kernel_clone+0xea/0x7f0 [ 112.903172] __do_sys_clone3+0x1f5/0x280 [ 112.903192] do_syscall_64+0xbf/0x360 [ 112.903209] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:34:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000016c0)=""/4096) 08:34:04 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x5390, &(0x7f0000000400)={0x0, 0xff}) 08:34:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000016c0)=""/4096) 08:34:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x34}}, 0x0) 08:34:04 executing program 5: clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/7, 0x980c1484117554e9, &(0x7f00000004c0)=""/163, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 08:34:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) capget(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/103, 0x67}, {0x0}, {0x0}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x12060, &(0x7f0000000300)) capset(&(0x7f0000000340)={0x0, r0}, &(0x7f0000000380)={0x0, 0x100, 0x2, 0x101, 0x0, 0x3ed}) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:34:04 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) capget(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/103, 0x67}, {0x0}, {0x0}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x12060, &(0x7f0000000300)) capset(&(0x7f0000000340)={0x0, r0}, &(0x7f0000000380)={0x0, 0x100, 0x2, 0x101, 0x0, 0x3ed}) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:34:04 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$DVD_AUTH(r0, 0x5303, &(0x7f0000000140)=@lsc={0x3, 0x0, "8c2e9c993edfe1625d5a"}) 08:34:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000016c0)=""/4096) 08:34:04 executing program 5: clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/7, 0x980c1484117554e9, &(0x7f00000004c0)=""/163, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 08:34:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000016c0)=""/4096) 08:34:04 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x5390, &(0x7f0000000400)={0x0, 0xff}) [ 113.191361] ------------[ cut here ]------------ [ 113.192352] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#0: syz-executor.3/4056 [ 113.193749] Modules linked in: [ 113.194368] CPU: 0 UID: 0 PID: 4056 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 113.196116] Tainted: [W]=WARN [ 113.196609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.197824] RIP: 0010:mntput_no_expire+0x78e/0xbe0 [ 113.198593] Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b [ 113.201205] RSP: 0018:ffff888045a17bd0 EFLAGS: 00010293 [ 113.202019] RAX: 0000000000000000 RBX: 1ffff11008b42f7f RCX: ffffffff81bf96d3 [ 113.203085] RDX: ffff888045a08000 RSI: ffffffff81bf96dd RDI: 0000000000000005 [ 113.204147] RBP: ffff88801f70e540 R08: 0000000000000001 R09: 0000000000000000 [ 113.205279] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff888045a17c38 [ 113.206367] R13: 00000000ffffffff R14: dead000000000100 R15: ffff88801f70e540 [ 113.207432] FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 113.208621] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.209492] CR2: 00007f77a516dfc0 CR3: 000000002fee9000 CR4: 0000000000350ef0 [ 113.210560] Call Trace: [ 113.210948] [ 113.211290] ? __pfx_autoremove_wake_function+0x10/0x10 [ 113.212108] ? __pfx_mntput_no_expire+0x10/0x10 [ 113.212835] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 113.213555] ? shrink_dentry_list+0x1a/0x650 [ 113.214210] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 113.215040] namespace_unlock+0x7f1/0x810 [ 113.215702] ? __pfx_namespace_unlock+0x10/0x10 [ 113.216430] ? find_held_lock+0x2b/0x80 [ 113.217031] ? lock_release+0xc8/0x290 [ 113.217642] put_mnt_ns+0xf5/0x120 [ 113.218178] free_nsproxy+0x3a/0x400 [ 113.220084] switch_task_namespaces+0xe2/0x100 [ 113.221896] do_exit+0x841/0x2970 [ 113.222502] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.223414] ? zap_other_threads+0x2b9/0x3a0 [ 113.224069] ? __pfx_do_exit+0x10/0x10 [ 113.224681] ? do_group_exit+0x1c3/0x2a0 [ 113.225284] ? _raw_spin_unlock_irq+0x23/0x40 [ 113.225986] do_group_exit+0xd3/0x2a0 [ 113.226596] __x64_sys_exit_group+0x3e/0x50 [ 113.227229] x64_sys_call+0x18c5/0x18d0 [ 113.227846] do_syscall_64+0xbf/0x360 [ 113.228436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.229181] RIP: 0033:0x7f77a7bf8b19 [ 113.229761] Code: Unable to access opcode bytes at 0x7f77a7bf8aef. [ 113.230702] RSP: 002b:00007f77a516dbc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 113.231825] RAX: ffffffffffffffda RBX: 00007f77a7d0bf60 RCX: 00007f77a7bf8b19 [ 113.232880] RDX: 00007f77a7bf8b19 RSI: 0000000000000000 RDI: 000000000000000b [ 113.233926] RBP: 000000000000000b R08: 0000000000000000 R09: 00007f77a7d0bf60 [ 113.234988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.236058] R13: 00007fff45b5fcbf R14: 00007f77a516e300 R15: 0000000000022000 [ 113.237131] [ 113.237518] irq event stamp: 1169 [ 113.238019] hardirqs last enabled at (1177): [] __up_console_sem+0x78/0x80 [ 113.239277] hardirqs last disabled at (1186): [] __up_console_sem+0x5d/0x80 [ 113.240557] softirqs last enabled at (1146): [] handle_softirqs+0x50c/0x770 [ 113.241822] softirqs last disabled at (1141): [] __irq_exit_rcu+0xc4/0x100 [ 113.243082] ---[ end trace 0000000000000000 ]--- 08:34:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000016c0)=""/4096) 08:34:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x34}}, 0x0) 08:34:04 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$DVD_AUTH(r0, 0x5303, &(0x7f0000000140)=@lsc={0x3, 0x0, "8c2e9c993edfe1625d5a"}) 08:34:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000016c0)=""/4096) 08:34:04 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$DVD_AUTH(r0, 0x5303, &(0x7f0000000140)=@lsc={0x3, 0x0, "8c2e9c993edfe1625d5a"}) 08:34:04 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) capget(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/103, 0x67}, {0x0}, {0x0}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x12060, &(0x7f0000000300)) capset(&(0x7f0000000340)={0x0, r0}, &(0x7f0000000380)={0x0, 0x100, 0x2, 0x101, 0x0, 0x3ed}) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:34:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) capget(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/103, 0x67}, {0x0}, {0x0}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x12060, &(0x7f0000000300)) capset(&(0x7f0000000340)={0x0, r0}, &(0x7f0000000380)={0x0, 0x100, 0x2, 0x101, 0x0, 0x3ed}) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:34:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) capget(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/103, 0x67}, {0x0}, {0x0}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x12060, &(0x7f0000000300)) capset(&(0x7f0000000340)={0x0, r0}, &(0x7f0000000380)={0x0, 0x100, 0x2, 0x101, 0x0, 0x3ed}) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:34:04 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x5390, &(0x7f0000000400)={0x0, 0xff}) 08:34:04 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 08:34:04 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x89}]}}}}}, 0x0) 08:34:04 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:04 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:04 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:04 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x89}]}}}}}, 0x0) 08:34:04 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:04 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) capget(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/103, 0x67}, {0x0}, {0x0}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x12060, &(0x7f0000000300)) capset(&(0x7f0000000340)={0x0, r0}, &(0x7f0000000380)={0x0, 0x100, 0x2, 0x101, 0x0, 0x3ed}) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:34:04 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 08:34:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 08:34:04 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x89}]}}}}}, 0x0) 08:34:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 08:34:04 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:04 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x89}]}}}}}, 0x0) 08:34:04 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 08:34:04 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) capget(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/103, 0x67}, {0x0}, {0x0}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x12060, &(0x7f0000000300)) capset(&(0x7f0000000340)={0x0, r0}, &(0x7f0000000380)={0x0, 0x100, 0x2, 0x101, 0x0, 0x3ed}) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:34:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 08:34:04 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 08:34:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 08:34:04 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:05 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8943, &(0x7f0000000640)={'wpan0\x00'}) 08:34:05 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:05 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 08:34:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) capget(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/103, 0x67}, {0x0}, {0x0}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x12060, &(0x7f0000000300)) capset(&(0x7f0000000340)={0x0, r0}, &(0x7f0000000380)={0x0, 0x100, 0x2, 0x101, 0x0, 0x3ed}) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:34:05 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) [ 114.193200] BUG: Bad rss-counter state mm:00000000742fff79 type:MM_ANONPAGES val:-2 Comm:syz-executor.3 Pid:4136 08:34:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0) 08:34:05 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:05 executing program 2: prctl$PR_GET_THP_DISABLE(0x2a) 08:34:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x26, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:34:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}}) 08:34:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8943, &(0x7f0000000640)={'wpan0\x00'}) 08:34:05 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:34:05 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000140)={@msf, 0x1, 0x42, 0x0}) 08:34:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x26, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:34:05 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000840)) mknodat(r0, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) 08:34:05 executing program 2: prctl$PR_GET_THP_DISABLE(0x2a) [ 114.422164] ------------[ cut here ]------------ [ 114.423047] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.5/287 [ 114.423949] Modules linked in: [ 114.424222] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 114.425334] Tainted: [W]=WARN [ 114.425586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.426238] RIP: 0010:mntput_no_expire+0x78e/0xbe0 [ 114.426813] Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b [ 114.428392] RSP: 0018:ffff88800cfcfc00 EFLAGS: 00010293 [ 114.428819] RAX: 0000000000000000 RBX: 1ffff110019f9f85 RCX: ffffffff81bf96d3 [ 114.429403] RDX: ffff88800a9c5280 RSI: ffffffff81bf96dd RDI: 0000000000000005 [ 114.429964] RBP: ffff88804311ae00 R08: 0000000000000001 R09: 0000000000000000 [ 114.430544] R10: 00000000fffffffb R11: 0000000000000001 R12: ffff88800cfcfc68 [ 114.431103] R13: 00000000fffffffb R14: dead000000000100 R15: ffff88804311ae00 [ 114.431686] FS: 000055556b728400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 114.432335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.432794] CR2: 000055556b731c58 CR3: 000000004080f000 CR4: 0000000000350ef0 [ 114.433367] Call Trace: [ 114.433579] [ 114.433762] ? __pfx_autoremove_wake_function+0x10/0x10 [ 114.434190] ? __pfx_mntput_no_expire+0x10/0x10 [ 114.434591] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 114.434968] ? shrink_dentry_list+0x1a/0x650 [ 114.435352] ? up_write+0x195/0x520 [ 114.435653] namespace_unlock+0x7f1/0x810 [ 114.435993] ? __pfx_namespace_unlock+0x10/0x10 [ 114.436388] ? find_held_lock+0x2b/0x80 [ 114.436718] ? lock_release+0xc8/0x290 [ 114.437039] path_umount+0x6a4/0x1100 [ 114.437369] ? kmem_cache_free+0x2a1/0x540 [ 114.437708] ? __pfx_path_umount+0x10/0x10 [ 114.438045] ? putname.part.0+0x11b/0x160 [ 114.438406] __x64_sys_umount+0x15c/0x190 [ 114.438745] ? __pfx___x64_sys_umount+0x10/0x10 [ 114.439118] do_syscall_64+0xbf/0x360 [ 114.439447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.439861] RIP: 0033:0x7f49c7ea8f87 [ 114.440155] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.441584] RSP: 002b:00007fff7d7c1848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 114.442183] RAX: ffffffffffffffda RBX: 0000000000000027 RCX: 00007f49c7ea8f87 [ 114.442759] RDX: 00007fff7d7c191a RSI: 000000000000000a RDI: 00007fff7d7c1910 [ 114.443339] RBP: 00007fff7d7c1910 R08: 00000000ffffffff R09: 00007fff7d7c16e0 [ 114.443901] R10: 000055556b729c7b R11: 0000000000000246 R12: 00007f49c7f01105 [ 114.444482] R13: 00007fff7d7c29d0 R14: 000055556b729c20 R15: 00007fff7d7c2a10 [ 114.445052] [ 114.445241] irq event stamp: 216835 [ 114.445543] hardirqs last enabled at (216845): [] __up_console_sem+0x78/0x80 [ 114.446227] hardirqs last disabled at (216852): [] __up_console_sem+0x5d/0x80 [ 114.446927] softirqs last enabled at (216816): [] handle_softirqs+0x50c/0x770 [ 114.448217] softirqs last disabled at (216871): [] __irq_exit_rcu+0xc4/0x100 [ 114.449380] ---[ end trace 0000000000000000 ]--- [ 114.452637] ------------[ cut here ]------------ [ 114.453017] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.5/287 [ 114.453930] Modules linked in: [ 114.454381] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 114.455333] Tainted: [W]=WARN [ 114.455581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.456225] RIP: 0010:mntput_no_expire+0x78e/0xbe0 [ 114.456638] Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b [ 114.458087] RSP: 0018:ffff88800cfcfce0 EFLAGS: 00010293 [ 114.458540] RAX: 0000000000000000 RBX: 1ffff110019f9fa1 RCX: ffffffff81bf96d3 [ 114.459101] RDX: ffff88800a9c5280 RSI: ffffffff81bf96dd RDI: 0000000000000005 [ 114.459676] RBP: ffff88804311ae00 R08: 0000000000000001 R09: 0000000000000000 [ 114.460234] R10: 00000000fffffff9 R11: 0000000000000001 R12: ffff88800cfcfd48 [ 114.460826] R13: 00000000fffffff9 R14: ffff88804311ae00 R15: ffff88804311aee8 [ 114.461408] FS: 000055556b728400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 114.462043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.462534] CR2: 0000555585f36c58 CR3: 000000004080f000 CR4: 0000000000350ef0 [ 114.463092] Call Trace: [ 114.463317] [ 114.463508] ? __pfx_mntput_no_expire+0x10/0x10 [ 114.463891] ? dput.part.0+0xce/0x930 [ 114.464197] ? lock_release+0xc8/0x290 [ 114.464534] path_umount+0x6e0/0x1100 [ 114.464841] ? kmem_cache_free+0x2a1/0x540 [ 114.465178] ? __pfx_path_umount+0x10/0x10 [ 114.465532] ? putname.part.0+0x11b/0x160 [ 114.465867] __x64_sys_umount+0x15c/0x190 [ 114.466201] ? __pfx___x64_sys_umount+0x10/0x10 [ 114.466605] do_syscall_64+0xbf/0x360 [ 114.466917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.467340] RIP: 0033:0x7f49c7ea8f87 [ 114.467636] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.469065] RSP: 002b:00007fff7d7c1848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 114.469678] RAX: ffffffffffffffda RBX: 0000000000000027 RCX: 00007f49c7ea8f87 [ 114.470238] RDX: 00007fff7d7c191a RSI: 000000000000000a RDI: 00007fff7d7c1910 [ 114.470821] RBP: 00007fff7d7c1910 R08: 00000000ffffffff R09: 00007fff7d7c16e0 [ 114.471410] R10: 000055556b729c7b R11: 0000000000000246 R12: 00007f49c7f01105 [ 114.471967] R13: 00007fff7d7c29d0 R14: 000055556b729c20 R15: 00007fff7d7c2a10 [ 114.472554] [ 114.472746] irq event stamp: 217831 [ 114.473030] hardirqs last enabled at (217839): [] __up_console_sem+0x78/0x80 [ 114.473730] hardirqs last disabled at (217848): [] __up_console_sem+0x5d/0x80 [ 114.474434] softirqs last enabled at (217588): [] handle_softirqs+0x50c/0x770 [ 114.475137] softirqs last disabled at (217583): [] __irq_exit_rcu+0xc4/0x100 [ 114.475838] ---[ end trace 0000000000000000 ]--- 08:34:05 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:34:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8943, &(0x7f0000000640)={'wpan0\x00'}) 08:34:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x26, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:34:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)}, {0x0}, {&(0x7f0000000140)}, {0x0}, {0xffffffffffffffff}, {&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000780)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 08:34:05 executing program 2: prctl$PR_GET_THP_DISABLE(0x2a) 08:34:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0) 08:34:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}}) [ 114.708809] BUG: Bad rss-counter state mm:00000000f28d6a23 type:MM_FILEPAGES val:-22 Comm:syz-executor.0 Pid:4183 08:34:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x26, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:34:05 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:34:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8943, &(0x7f0000000640)={'wpan0\x00'}) 08:34:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0) 08:34:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)}, {0x0}, {&(0x7f0000000140)}, {0x0}, {0xffffffffffffffff}, {&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000780)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 08:34:05 executing program 2: prctl$PR_GET_THP_DISABLE(0x2a) 08:34:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}}) 08:34:05 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000140)={@msf, 0x1, 0x42, 0x0}) [ 115.033967] kmemleak: Automatic memory scanning thread ended 08:34:06 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000140)={@msf, 0x1, 0x42, 0x0}) 08:34:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}}) 08:34:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 08:34:06 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) 08:34:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0) 08:34:06 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:34:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x404) 08:34:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)}, {0x0}, {&(0x7f0000000140)}, {0x0}, {0xffffffffffffffff}, {&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000780)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 08:34:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x404) 08:34:06 executing program 7: ioprio_set$pid(0x2, 0x0, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/psched\x00') pread64(r0, 0x0, 0x0, 0x0) [ 115.260686] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode 08:34:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 08:34:06 executing program 7: ioprio_set$pid(0x2, 0x0, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/psched\x00') pread64(r0, 0x0, 0x0, 0x0) 08:34:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)}, {0x0}, {&(0x7f0000000140)}, {0x0}, {0xffffffffffffffff}, {&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000780)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 08:34:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) [ 115.383201] mac80211_hwsim hwsim10 wlan1: left promiscuous mode 08:34:06 executing program 7: ioprio_set$pid(0x2, 0x0, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/psched\x00') pread64(r0, 0x0, 0x0, 0x0) [ 115.412106] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 115.425030] BUG: Bad rss-counter state mm:00000000289b8aa7 type:MM_FILEPAGES val:25 Comm:syz-executor.5 Pid:4227 [ 115.425890] BUG: Bad rss-counter state mm:00000000289b8aa7 type:MM_ANONPAGES val:23 Comm:syz-executor.5 Pid:4227 [ 115.443721] mac80211_hwsim hwsim10 wlan1: left promiscuous mode 08:34:06 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r0, 0x0, 0x10) [ 115.496546] BUG: Bad rss-counter state mm:00000000204bdff0 type:MM_FILEPAGES val:-39 Comm:syz-executor.6 Pid:4211 [ 115.497491] BUG: Bad rss-counter state mm:00000000204bdff0 type:MM_ANONPAGES val:-28 Comm:syz-executor.6 Pid:4211 08:34:06 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000140)={@msf, 0x1, 0x42, 0x0}) 08:34:06 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x300) 08:34:06 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) 08:34:06 executing program 7: ioprio_set$pid(0x2, 0x0, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/psched\x00') pread64(r0, 0x0, 0x0, 0x0) 08:34:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x404) 08:34:06 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) [ 115.618978] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 115.625749] BUG: Bad rss-counter state mm:00000000969bfae4 type:MM_FILEPAGES val:-28 Comm:syz-executor.5 Pid:4241 [ 115.626689] BUG: Bad rss-counter state mm:00000000969bfae4 type:MM_ANONPAGES val:-31 Comm:syz-executor.5 Pid:4241 [ 115.632074] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 115.639971] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 115.662811] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 115.682043] BUG: Bad rss-counter state mm:000000001ad6c947 type:MM_FILEPAGES val:-36 Comm:syz-executor.3 Pid:4247 [ 115.683415] BUG: Bad rss-counter state mm:000000001ad6c947 type:MM_ANONPAGES val:-1 Comm:syz-executor.3 Pid:4247 08:34:06 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) 08:34:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 08:34:06 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x300) 08:34:06 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) 08:34:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x404) 08:34:06 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) 08:34:06 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r0, 0x0, 0x10) 08:34:06 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x300) 08:34:06 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) [ 115.808773] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode 08:34:06 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r0, 0x0, 0x10) [ 115.813119] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 115.822324] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode 08:34:06 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) [ 115.833786] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode 08:34:06 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x300) 08:34:06 executing program 2: r0 = socket$inet(0x2, 0x80003, 0xff) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000240)="3e0ac342be0d0e771050c2abe23a6603152ef17a", 0x14, 0x0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) [ 115.847737] mac80211_hwsim hwsim16 wlan1: left promiscuous mode [ 115.848373] mac80211_hwsim hwsim7 wlan1: left promiscuous mode 08:34:06 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) [ 115.883391] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 115.889928] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 115.904442] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 115.924632] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 115.929627] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 115.937231] BUG: Bad rss-counter state mm:00000000b3fc98a1 type:MM_FILEPAGES val:-51 Comm:syz-executor.5 Pid:4284 [ 115.938137] BUG: Bad rss-counter state mm:00000000b3fc98a1 type:MM_ANONPAGES val:13 Comm:syz-executor.5 Pid:4284 [ 115.940810] BUG: Bad rss-counter state mm:0000000084c714e1 type:MM_FILEPAGES val:34 Comm:syz-executor.1 Pid:4277 [ 115.941908] BUG: Bad rss-counter state mm:0000000084c714e1 type:MM_ANONPAGES val:-56 Comm:syz-executor.1 Pid:4277 [ 115.946503] mac80211_hwsim hwsim7 wlan1: left promiscuous mode 08:34:06 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x300) 08:34:06 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) 08:34:06 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x300) 08:34:06 executing program 2: r0 = socket$inet(0x2, 0x80003, 0xff) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000240)="3e0ac342be0d0e771050c2abe23a6603152ef17a", 0x14, 0x0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) 08:34:06 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r0, 0x0, 0x10) 08:34:06 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) 08:34:06 executing program 6: r0 = socket$inet(0x2, 0x80003, 0xff) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000240)="3e0ac342be0d0e771050c2abe23a6603152ef17a", 0x14, 0x0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) 08:34:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e29b005f9700000020b978657d17480824"}) [ 116.004224] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode 08:34:06 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x300) [ 116.024051] mac80211_hwsim hwsim16 wlan1: left promiscuous mode [ 116.051812] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode 08:34:07 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) [ 116.075647] mac80211_hwsim hwsim15 wlan1: left promiscuous mode 08:34:07 executing program 2: r0 = socket$inet(0x2, 0x80003, 0xff) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000240)="3e0ac342be0d0e771050c2abe23a6603152ef17a", 0x14, 0x0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) 08:34:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e29b005f9700000020b978657d17480824"}) 08:34:07 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) 08:34:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) [ 116.118899] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 116.133502] mac80211_hwsim hwsim16 wlan1: left promiscuous mode 08:34:07 executing program 6: r0 = socket$inet(0x2, 0x80003, 0xff) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000240)="3e0ac342be0d0e771050c2abe23a6603152ef17a", 0x14, 0x0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) 08:34:07 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="fe3cbe07b7f4da1e60156071223ab3f687958824a4402b5eda1d34448c7ae721e90c627136b6047b12fe0fa5074f1bfb5284fe71cec756cf184330c5dc6230e009b664bed7cfed5f17557679f4b1a89ce156a3399854df609f3a64627d44f6d38d9d558dcd65ef888661a5892effe15486bcbfd5f17586a68278f8a96c0f3ffcd70baa0b65027e8a9a281f06949622713f47306f73fb5e9a8c00455c6f4b88ed1827081d5c76309759f3048bf11919a081614fa789d2afbe89d5ecd5f974", 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x5f, r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-]'}, {0x20, '^['}], 0xa, "13130441e25c3eb393c66dc6d50c88f34039e31e0f551ec3449a8343b630b190a3e18d5082132b5cb050a3e38d978b10b6ce0aff431b7d597a640fa919bdc71f0df8deae95684a374639ec47a77edca2bd248c608c4acb88ee359a917477f8d9b0ef6282e433550a8f3b6e017496a38f034178dde1ab52e474ef4c6ab13bcbd942d084404dfe3f0a1b2cbcb46c4fbdbd452479a249056e51f70a45c235ba77"}, 0xb0) [ 116.161115] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode 08:34:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e29b005f9700000020b978657d17480824"}) 08:34:07 executing program 2: r0 = socket$inet(0x2, 0x80003, 0xff) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000240)="3e0ac342be0d0e771050c2abe23a6603152ef17a", 0x14, 0x0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) [ 116.198100] mac80211_hwsim hwsim15 wlan1: left promiscuous mode 08:34:07 executing program 4: getresgid(&(0x7f0000003580), 0xfffffffffffffffc, 0x0) 08:34:07 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) 08:34:07 executing program 6: r0 = socket$inet(0x2, 0x80003, 0xff) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000240)="3e0ac342be0d0e771050c2abe23a6603152ef17a", 0x14, 0x0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) 08:34:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) 08:34:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e29b005f9700000020b978657d17480824"}) 08:34:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffffffffffffffb, 0x0) 08:34:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 08:34:07 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sync_file_range(r0, 0x0, 0x0, 0xd) 08:34:07 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) 08:34:07 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sync_file_range(r0, 0x0, 0x0, 0xd) 08:34:07 executing program 4: getresgid(&(0x7f0000003580), 0xfffffffffffffffc, 0x0) 08:34:07 executing program 6: socket$inet6(0xa, 0x3, 0x0) 08:34:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 08:34:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffffffffffffffb, 0x0) 08:34:07 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) 08:34:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 08:34:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) 08:34:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 08:34:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 08:34:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) 08:34:07 executing program 4: getresgid(&(0x7f0000003580), 0xfffffffffffffffc, 0x0) [ 116.812893] BUG: Bad rss-counter state mm:0000000091e57d24 type:MM_FILEPAGES val:17 Comm:syz-executor.7 Pid:4356 [ 116.813785] BUG: Bad rss-counter state mm:0000000091e57d24 type:MM_ANONPAGES val:15 Comm:syz-executor.7 Pid:4356 08:34:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffffffffffffffb, 0x0) 08:34:07 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sync_file_range(r0, 0x0, 0x0, 0xd) 08:34:07 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000008}) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 08:34:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 116.899447] audit: type=1400 audit(1756456447.883:10): avc: denied { block_suspend } for pid=4379 comm="syz-executor.0" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 08:34:07 executing program 4: getresgid(&(0x7f0000003580), 0xfffffffffffffffc, 0x0) 08:34:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) [ 116.929146] BUG: Bad rss-counter state mm:000000006d00242a type:MM_FILEPAGES val:21 Comm:syz-executor.7 Pid:4377 [ 116.930042] BUG: Bad rss-counter state mm:000000006d00242a type:MM_ANONPAGES val:-29 Comm:syz-executor.7 Pid:4377 [ 116.955918] BUG: Bad rss-counter state mm:000000002b7d3458 type:MM_FILEPAGES val:-48 Comm:syz-executor.5 Pid:4373 [ 116.956921] BUG: Bad rss-counter state mm:000000002b7d3458 type:MM_ANONPAGES val:-23 Comm:syz-executor.5 Pid:4373 08:34:07 executing program 6: socket$inet6(0xa, 0x3, 0x0) 08:34:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 08:34:07 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sync_file_range(r0, 0x0, 0x0, 0xd) 08:34:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) 08:34:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 08:34:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffffffffffffffb, 0x0) 08:34:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) 08:34:08 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chroot(&(0x7f0000000140)='./file0\x00') 08:34:08 executing program 6: socket$inet6(0xa, 0x3, 0x0) 08:34:08 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000008}) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 08:34:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) 08:34:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) 08:34:08 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) 08:34:08 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000008}) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 08:34:08 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000340)=@FILEID_NILFS_WITH_PARENT={0x20}, 0x341c02) 08:34:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) 08:34:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) [ 117.190206] BUG: Bad rss-counter state mm:0000000012b0d791 type:MM_FILEPAGES val:1 Comm:syz-executor.2 Pid:4419 [ 117.191086] BUG: Bad rss-counter state mm:0000000012b0d791 type:MM_ANONPAGES val:-33 Comm:syz-executor.2 Pid:4419 [ 117.211717] BUG: Bad rss-counter state mm:000000002da8f74c type:MM_FILEPAGES val:-2 Comm:syz-executor.5 Pid:4432 [ 117.213050] BUG: Bad rss-counter state mm:000000002da8f74c type:MM_ANONPAGES val:5 Comm:syz-executor.5 Pid:4432 [ 117.258000] BUG: Bad rss-counter state mm:00000000f3aceef5 type:MM_FILEPAGES val:-17 Comm:modprobe Pid:4436 [ 117.258853] BUG: Bad rss-counter state mm:00000000f3aceef5 type:MM_ANONPAGES val:-31 Comm:modprobe Pid:4436 08:34:08 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) 08:34:08 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chroot(&(0x7f0000000140)='./file0\x00') 08:34:08 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000008}) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 08:34:08 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000340)=@FILEID_NILFS_WITH_PARENT={0x20}, 0x341c02) 08:34:08 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000008}) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 08:34:08 executing program 4: clone(0x100500, &(0x7f0000000140)='X', &(0x7f0000000600), 0x0, 0x0) 08:34:08 executing program 6: socket$inet6(0xa, 0x3, 0x0) 08:34:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xe803) 08:34:08 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000008}) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 08:34:08 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) 08:34:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xe803) 08:34:08 executing program 4: clone(0x100500, &(0x7f0000000140)='X', &(0x7f0000000600), 0x0, 0x0) 08:34:08 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chroot(&(0x7f0000000140)='./file0\x00') 08:34:08 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000340)=@FILEID_NILFS_WITH_PARENT={0x20}, 0x341c02) 08:34:08 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000008}) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 08:34:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 08:34:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xe803) 08:34:08 executing program 4: clone(0x100500, &(0x7f0000000140)='X', &(0x7f0000000600), 0x0, 0x0) 08:34:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev}, 0x10, 0x0}}], 0x1, 0x8000) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 08:34:08 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000340)=@FILEID_NILFS_WITH_PARENT={0x20}, 0x341c02) 08:34:08 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chroot(&(0x7f0000000140)='./file0\x00') 08:34:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 08:34:08 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xe803) 08:34:08 executing program 0: getrusage(0x0, 0x0) 08:34:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev}, 0x10, 0x0}}], 0x1, 0x8000) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 08:34:08 executing program 4: clone(0x100500, &(0x7f0000000140)='X', &(0x7f0000000600), 0x0, 0x0) 08:34:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 08:34:08 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:08 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 117.743217] BUG: Bad rss-counter state mm:00000000f5bbeb2d type:MM_SWAPENTS val:9 Comm:syz-executor.1 Pid:4494 08:34:08 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev}, 0x10, 0x0}}], 0x1, 0x8000) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 08:34:08 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:08 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 08:34:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev}, 0x10, 0x0}}], 0x1, 0x8000) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 08:34:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 08:34:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 08:34:08 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:08 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:08 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:08 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:08 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:08 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 08:34:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 08:34:09 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:09 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:09 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 08:34:09 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:09 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 08:34:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 08:34:09 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:09 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:34:09 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x80081, 0x0) pwrite64(r0, &(0x7f0000000140)="82", 0x1, 0x0) 08:34:09 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) fcntl$addseals(r0, 0x403, 0x0) 08:34:09 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:09 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x80081, 0x0) pwrite64(r0, &(0x7f0000000140)="82", 0x1, 0x0) 08:34:09 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) fcntl$addseals(r0, 0x403, 0x0) 08:34:09 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) fcntl$addseals(r0, 0x403, 0x0) 08:34:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:09 executing program 6: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) fcntl$addseals(r0, 0x403, 0x0) 08:34:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:09 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) fcntl$addseals(r0, 0x403, 0x0) 08:34:09 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x80081, 0x0) pwrite64(r0, &(0x7f0000000140)="82", 0x1, 0x0) 08:34:09 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000039c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003980)={&(0x7f0000001800)={0xec4, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x85, 0x1, "fe54319e36d34ac423a8f05e16416a9e24d60d91f0c452ab1955d56d1dfce9ef7e5fccba6a440f820e7cfd399c0c1c205ebd2ec7f6dfa6edf0e88ad2b63d4681dd05d827cbb48aec11a39582735d13c11ff25cc573458d43e22a63b113285509f28196b4d09ae88073e34da5d330f399ad3475ab8aea3bf50a0c783cf767b2ea3a"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "19a27c7e0e47320bdc7ea5476c93517b739d90d6d739228bf958db52cca52e01dda2b87eaf842d5ea715618f9098dfb97143cb1a5c73bb8aa733589207627d9f08835c71e9"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "17f6421b2f670b8c224563b78693282653e5305fb6912e381d5e4751de0374776074066cca2d8755122e3ad069471506f658c0bddeb6131f44dda96cf38d6cf34e47c6cac8984553a0f916097cc3eab69a"}, @INET_DIAG_REQ_BYTECODE={0xd49, 0x1, "86e40bcab1e42f029e0b784de1f741cf5646c63f821873bd329a5033e87edfb8121f2268b59a3a31f274647190417f7432878f00ed2359fcbbb53ec886832b2ee83fda6f349ad76c6ad2e0f2ba73a757d0344456e49c97c8d965da0bb3530078160fbdbdf61703ddc3124fbc33775f2a00f74f755bd99b9aeb505bbdca11ac3a1f1318fde05a90dd9a3f8232d359138c8040ebb4eddba0b10d5658123de876bbc426f4501dba453e76b742a8fd58a9ec33450e9a7236ef5c03ce11a7c2a4ec515b52f3034cc1b39720d20a57e4dfa506bad691c78e10d66a35fb6c79da829cd99bb4bbf9436fcd250869284caff81fd2c78dcaa139f210385c6415c4e6cd8f47cba6de73cbb28712d2949d8368fa815a18b2c9f6e3f2bf0d08fad8399eb6b28a47b71f07f352e76ef8b04434d25f547f3a10745307eb6e85f6161d54d0a683ea13565d9d91dee8aca8d40b1336a37f141d669fa72a9edfe7ee794fde2c577fc4782ef1731dda7c3eb6c94e64de699047f9f41496e5c1cc8ec9d4b6e53fa6d472eb20e9ac3bce1e28dece7abe6edd3a02431195aeb2b1f4795d0d23d0d8a68a06262d75616078c5dca61763d04f354f29a5ffc0c3f5dbac8085905abe270ca0dcf710c3b3e2deca40d8766ca27d99dd0fdd55aacf551867e299fe74c3d69363d26462ecf2561fa9b523a63e389337f5586343e8138c4ad24ac411ed85bd98bb026f04d186088d09077b77947cd073efd4ab822c719cf2066c42314b2fb2a017dfa26990cc6b5a52341474c406c0f3c9e0c51820661dfa49402eb58ffa47f2a33228a70302bffb3ab54bc0deb69a24477c001cd3218847780009dec6b482dce606f82931508b59a17df267c630d56d26d60a3e6d748c9197afd907fd36e3bd22a2671b5dca301ff3bf022d464626be1a07f97b20d7cf95cbd9de1c970042990b23421e81ca49891d5f4b3e00dd4380fd5a3b6b8459fdf8419f42812317234fad663863bdb6dbf8b86f92d44c8e368637a1d346861f8c7d79b591333437b32ad3fd22f5528b29e6f601211b31471ce920e4135016dacef7d0b60c7bb97c200af2ba7e579306ced188490207baebdd6784ef477d9f43bdf8e90cd68c1e5621bdc44b279e8678334f8a263f4d892f0e58a7d2b633301fdd41c5872f81ee9f885dcc6595801263d6ea1f52aa57013ff367c56abff2483df4d03396196185c583296b1323de8f9ed40f5a4a94a7622fae0336feb8c21f15424b67a978cba165e788f86e8d2a4661c774ff8f601d3bd096373c5cb2db6e64b59ea4e9d5208216edaaa82d5e5719b2b5b84173aeea30cda4c2ad298ae1c6ab6828700cd89b1c2c34c34475892ddea1347a37f76990e50281b496a65b4dfaa278a787814448b98b340bf923c1bdf2c1edaba658830bf2a214ee2c170fb8a4053c1e5f540f45ec09eea6f0471289b1775294d377ce704c08b1703398b93f1b89e27b510ed95dc6e1f77e437cff0b3181228738c283422e9cf0ffcca2a0d26edc919b312325b3105fc3722a0b34a326873e86f7e82e6db981d77eb530a87e949eaea834e36398dcbfd8ae69346f917951cafdd8af0eaede553873fe169550502b91da7c9c7cdfd615cfc6e3d968498f8b6f947f7c1e3dd26158b169bd86ae90645b10b42d45ef1883c2396a6503b6de2e60f053f0aab3d71c3a3527a84a3178a1fa2eb84b52749eb2a98ac8a652bb3151050aa663739fccf2995b9a4fb4f7a16b32cc2910fe67c7c8bfa356fdc1b8172ac26c668aaf8b8fe04a4f13f29ee195c257b88485741a0c343c20116e369082ed8f5a7dab920f233089ec012bb296e3af70933315f8f18770585ed76cfb76f6f6829aeae4e226ebfc682e1f17c2862abeff9c3cc9f6b879e2c6c4fcee97f35e98c3879c533f56fb2d49e4563e5c4b7ef47e0e3c0464e8e9da8cc93834883c84637037f236ea1d83ba265c9db0b20fd53749b40aaf3b2d05ff12fdbe26b51cc9847b1b01bbea060fe46d77989a0c99686ccc351caefd0cdc5bbf2516fe3e9912674e7b635f85472f0cea88a429584cf4d2ff94866d512f795a45a6484a87dad04db154794df2b5a34cb6e089816972d0749c6cb41e2e1504b37a92c9287afb5868df325b892d3a375d00fcff09d9301dcdc966563baa31a17c8af27d7149b8944a7a982c326fa5e8b0f6ea4a9b4ffc3beb16ff665546af3b57f3ce618a5891381729a78b9da6def30924ee0432b9f6196f9e091c2f2d9cb220086151e1d5b5471769a5f4c0d5e85b8ed0f2dc0ba73cf89bb622dbab982c5fe9d4392c69c70dc3d08852860a74b1f09b4abf61f273a3c567dec245cc93b0ff7a386ad99dbbe391f7be82768ef16ac9f5ffde9f5ef824f95a1fad3e266ffb66d3579883cd3d3320a7f3c41d4b1cb68eb3d97555be7dd238c00f835fc6f7610607ba54bc14bad29dbed0d843951b2f85b2ce44bdde9ad80661272df1f62dc9ca73139ab9f1cbf8fd40091ce9d25b01765c64e35050d60a5fb4799460a17946bdf9966a6203bfb75f7dbd1d5600ef814ddcb2b19bc7a2c25a8e7933e47ea70d58913bbf919c57814e40f6bc63daf512a1d5b38d1e1682fafc6be353b78a046ea7b3ac7becc6ead121dbdb0593ccbabc7dfc6f1b54f0c36a779fd0ee2a69dbe21d97afe261129c2a2987f534ce6ebabc5ce9d5d564df00aabd3364bc687efcfc2148f9222b5d686a9a4701c9a627f27fad67a958819b23e6a29094fb4c6c466b4d8fbafccd375257bcbce2bc007e7c6a28afb7aed6df18bb279fb62fc8823406901a7d12a9defa0236a8f702b949e47a1b2c6458046e238f09e772db877fc2212f97af8c6a73fa635d827c29e9dbfc3cae37eaab34c68a3365ca7626cbe6df385c36827ae28eeae972ae30dcf3e5e8a852a8813b94bb50b38a5f11448aa83069dc9383fafc23a2730f0ce2f281d6344b5a0e71c440fa0e28f5ebadaada92eff9c61c677db69812da63dc9d3fdde5c43bcba7b0ac84c5f7089eea4232413efd5c3908efed8d9ea957b4f238fc219a0fc3931482f97db10fd71540875b8a151ef61450b73760bd7038c2e7daef590f5cf0064537fe54e55381d938511ef8d4c4a59fb6c8fa3a57506bfd0c3689bc2255a1fa1e82960875734af272dfbe6799aadc53fce8e3179eeddb8caff23c3a3d3324a1dbd9df041d81bf69146a3cce4dfae3f554973df6c052b487c869e96979e98b162f764feb6397f4be7c2fbb4f58d7631005cf6d7972f9aadb588e9371e79d6dec35abd739606122aa81318fa3eb46efb00dfc3e4f4e8dee725a3755d9a6d8b51babd741d896fba9d43739d3e8ae9ffebe6da92bb50bf30b69ff07977d369366562b00b7cd8ca3728fdc70fee0562b8235621212b0447d56855c07983230c04b39ebba8bb42f6103e52d261c7bc9a86754ced31396d4325e180cfcea367f28bfcbc7ded64ee2b86da4a53a917a5d7d03a4b2c124c43fb7745cb43ee4eab39042a20fd11deafdc1c80acefa60f397047238aa00e4a9a49f9dd2e7a6ad2c225606c529d24dc21749aa0ef16b5aba373a546d9afd053c6d871c076bdd1164c1cca84a9ead19d819a6f5451bc3b656afe5371bd02b44863eba53b0a0393039ccc20012c7b3a64d912e204a91885716a5ee2e88694854b5336297caa184ebd88866621c146501ad73de97d5e535bed49cc7084dca3842b5d3fa582b506023afe5eb4d36a919ddf1403f58d5df25d27e5d6eef9cd8a5e246b8761520bfb963e3c9ff7d2ab79da6cd00f807b697a19241629a9cdebce6b6ae57a2710fc820a7f2af140276c693130da4fc2849c6b6d77d2578eedc3244946e60bd1b4a42e517763e9948ab545f45eabc47565f9fe67f22e80fca4a91fc5ebb935476bb42ca1cfa025b9886bba47d95b97cb5dd5a4330c24a186a577d61320b33500b91e9e1c56a1727409aa59952eb90ef6055588ad6e529676c5e1399e7702985a4017ba57fd8ab50e0559e6733bafa88acc6905ea0cae4a816fcfbabca453a6dbbd03ccdc39549ca8f0a62484d7237f3cbab35de5339d36b5bb7b3515bc10028655f3fce9e37be28de37c41a24a64dc8b8d55a0cb07b8748fb5206179250ebeb1ab1647397ba1bcb5b2547b0de42a7da2097524e5d4e2ab8b08a27f5edf45bee6a62edec7b391918b547b6febe4daa0077a8499c085692add2701ff1491e01b06527515d340d108bce1adcea122012d34cf8ba40c56ea1c0ceabbd670f8a6713ccb2673819b0e23348b6051db18e1c973aa4e15e46e5a369b06759ce3a52c81795c1d94579afeb0ae4313553af14c3a1f4b1cb7a5b23e71bccf35bc95e91a2054c15933d7589766c097b2f3084e531f28f72fbdc9817dc1d898a558310d759975b946c3d8bc320eb6e40cf496ee28ee57cac3c9788fad09e382a086885bbf953fa3789464314057bb6fa64cc2a7568f56d8123f5254e1df544af6208a16260a079590e8b467c3e875bc306ac64247f0c35ac3abb893ca94a53c46d9b6612a53fa5c11b3d27e5b58cd4c4f028a360d3f3c35098acc0170121658080f9b39247022cc8096d4bee42e0e47c8afde3895e5a85454d24db917cff28a7c0bf30ca9727f30cb21e238f6e1feb864863350f826fc96454fa797c4a7f12059cbccb08318da702c48951f5f9a6df76fa6ddcdf4ff1615b78b1c29e28dae61676c9c210d2deeb3796e3f199bc30c62053a1b31ad9f864ebfc125f5d9840b79b778eec183aa7add23d18d79a7275a4442fd319c9540f74b5d79d00d6dc8a42eba10155a2339a76658d01"}]}, 0xec4}}, 0x0) 08:34:09 executing program 6: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) fcntl$addseals(r0, 0x403, 0x0) 08:34:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:09 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) [ 119.054835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=4619 comm=syz-executor.4 08:34:10 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x80081, 0x0) pwrite64(r0, &(0x7f0000000140)="82", 0x1, 0x0) 08:34:10 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:10 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages', 0x42101, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='0', 0x1}], 0x1, 0x0, 0x0, 0x0) 08:34:10 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000039c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003980)={&(0x7f0000001800)={0xec4, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x85, 0x1, "fe54319e36d34ac423a8f05e16416a9e24d60d91f0c452ab1955d56d1dfce9ef7e5fccba6a440f820e7cfd399c0c1c205ebd2ec7f6dfa6edf0e88ad2b63d4681dd05d827cbb48aec11a39582735d13c11ff25cc573458d43e22a63b113285509f28196b4d09ae88073e34da5d330f399ad3475ab8aea3bf50a0c783cf767b2ea3a"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "19a27c7e0e47320bdc7ea5476c93517b739d90d6d739228bf958db52cca52e01dda2b87eaf842d5ea715618f9098dfb97143cb1a5c73bb8aa733589207627d9f08835c71e9"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "17f6421b2f670b8c224563b78693282653e5305fb6912e381d5e4751de0374776074066cca2d8755122e3ad069471506f658c0bddeb6131f44dda96cf38d6cf34e47c6cac8984553a0f916097cc3eab69a"}, @INET_DIAG_REQ_BYTECODE={0xd49, 0x1, "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"}]}, 0xec4}}, 0x0) 08:34:10 executing program 6: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) fcntl$addseals(r0, 0x403, 0x0) 08:34:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:10 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffffa, 0x0) 08:34:10 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0xa1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000600)) 08:34:10 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages', 0x42101, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='0', 0x1}], 0x1, 0x0, 0x0, 0x0) [ 119.243854] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 119.245333] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 119.246434] CPU: 0 UID: 0 PID: 4642 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 119.247949] Tainted: [W]=WARN [ 119.248350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.249391] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.250005] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.252247] RSP: 0018:ffff8880446af600 EFLAGS: 00010212 [ 119.252931] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90006ec1000 [ 119.253832] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 119.254739] RBP: ffff8880446af870 R08: ffff88806ce31340 R09: ffffe8ffffc16a48 [ 119.255641] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.256535] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 119.257435] FS: 00007f0f16373700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 119.258433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.259180] CR2: 00007f77a7d08000 CR3: 0000000012128000 CR4: 0000000000350ef0 [ 119.260077] Call Trace: [ 119.260411] [ 119.260708] ? __pfx_perf_tp_event+0x10/0x10 [ 119.261314] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.261959] perf_trace_run_bpf_submit+0xef/0x180 [ 119.262592] perf_trace_lock+0x337/0x5d0 [ 119.263123] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.263711] ? lock_acquire+0x15e/0x2f0 [ 119.264222] ? futex_ref_get+0x48/0x300 [ 119.264731] ? futex_ref_get+0x114/0x300 [ 119.265242] ? futex_hash+0x15c/0x390 [ 119.265731] lock_release+0x1ab/0x290 [ 119.266230] ? futex_hash+0x15c/0x390 [ 119.266725] futex_ref_get+0x119/0x300 [ 119.267217] ? futex_hash+0x15c/0x390 [ 119.267694] futex_hash+0x70/0x390 [ 119.268144] futex_wait_setup+0xae/0x550 [ 119.268674] __futex_wait+0x151/0x300 [ 119.269173] ? __pfx___futex_wait+0x10/0x10 [ 119.269729] ? __pfx_futex_wake_mark+0x10/0x10 [ 119.270333] futex_wait+0xde/0x380 [ 119.270807] ? __pfx_futex_wait+0x10/0x10 [ 119.271340] ? perf_trace_lock+0xb5/0x5d0 [ 119.271876] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.272536] do_futex+0x2ee/0x370 [ 119.272988] ? __pfx_do_futex+0x10/0x10 [ 119.273495] ? do_raw_spin_lock+0x123/0x260 [ 119.274051] __x64_sys_futex+0x1c9/0x4d0 [ 119.274566] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.275302] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 119.275949] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.276514] ? kcov_ioctl+0x386/0x6c0 [ 119.276989] do_syscall_64+0xbf/0x360 [ 119.277462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.278087] RIP: 0033:0x7f0f18dfdb19 [ 119.278542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.280711] RSP: 002b:00007f0f16373218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.281620] RAX: ffffffffffffffda RBX: 00007f0f18f10f68 RCX: 00007f0f18dfdb19 [ 119.282475] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0f18f10f68 [ 119.283333] RBP: 00007f0f18f10f60 R08: 00007f0f16373700 R09: 0000000000000000 [ 119.284188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f18f10f6c [ 119.285044] R13: 00007fff131d684f R14: 00007f0f16373300 R15: 0000000000022000 [ 119.285912] [ 119.286202] Modules linked in: [ 119.286612] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 119.287485] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 119.288123] CPU: 1 UID: 0 PID: 4640 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 119.288993] Tainted: [D]=DIE, [W]=WARN [ 119.289279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.289882] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.290244] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.291578] RSP: 0018:ffff888046357800 EFLAGS: 00010212 [ 119.291972] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 119.292494] RDX: ffff888046025280 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 119.293018] RBP: ffff888046357a70 R08: ffff88806cf31340 R09: ffffe8ffffd16a48 [ 119.293541] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 119.294062] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 119.294594] FS: 000055558ffd3400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 119.295183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.295611] CR2: 0000555582f72c58 CR3: 0000000012128000 CR4: 0000000000350ef0 [ 119.296133] Call Trace: [ 119.296329] [ 119.296504] ? arch_scale_cpu_capacity+0x17/0xa0 [ 119.296868] ? __pfx_perf_tp_event+0x10/0x10 [ 119.297202] ? __asan_memset+0x24/0x50 [ 119.297509] ? perf_trace_lock+0xb5/0x5d0 [ 119.297827] ? kvm_sched_clock_read+0x16/0x30 [ 119.298174] ? sched_clock+0x37/0x60 [ 119.298464] ? sched_clock_cpu+0x6c/0x4e0 [ 119.298789] ? lock_is_held_type+0x9e/0x120 [ 119.299118] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.299492] perf_trace_run_bpf_submit+0xef/0x180 [ 119.299859] perf_trace_lock+0x337/0x5d0 [ 119.300166] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.300513] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.300881] ? perf_trace_lock+0xb5/0x5d0 [ 119.301256] ? find_held_lock+0x2b/0x80 [ 119.301643] ? get_futex_key+0x592/0x14a0 [ 119.302039] ? futex_ref_get+0x114/0x300 [ 119.302395] ? futex_hash+0x15c/0x390 [ 119.302753] lock_release+0x1ab/0x290 [ 119.303055] ? futex_hash+0x15c/0x390 [ 119.303343] futex_ref_get+0x119/0x300 [ 119.303634] ? futex_hash+0x15c/0x390 [ 119.303918] futex_hash+0x70/0x390 [ 119.304189] futex_wake+0x143/0x540 [ 119.304469] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.304813] ? __pfx_futex_wake+0x10/0x10 [ 119.305129] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 119.305519] ? finish_task_switch.isra.0+0x206/0x840 [ 119.305909] do_futex+0x26d/0x370 [ 119.306176] ? __pfx_do_futex+0x10/0x10 [ 119.306477] ? __pfx___schedule+0x10/0x10 [ 119.306803] __x64_sys_futex+0x1c9/0x4d0 [ 119.307111] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.307552] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.307900] ? xfd_validate_state+0x55/0x180 [ 119.308243] do_syscall_64+0xbf/0x360 [ 119.308533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.308913] RIP: 0033:0x7f0f18dfdb19 [ 119.309195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.310567] RSP: 002b:00007fff131d68c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.311224] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f18dfdb19 [ 119.311780] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f18f10f68 [ 119.312345] RBP: 00007f0f18f10f60 R08: 00007f0f16373700 R09: 0000000000000000 [ 119.312907] R10: 00007f0f16373700 R11: 0000000000000246 R12: 00007f0f18f15060 [ 119.313465] R13: 00007fff131d69d0 R14: 00007f0f18f10f60 R15: 000000000001d105 [ 119.314048] [ 119.314240] Modules linked in: [ 119.314525] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#3] SMP KASAN NOPTI [ 119.315769] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 119.316769] CPU: 0 UID: 0 PID: 4642 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 119.318162] Tainted: [D]=DIE, [W]=WARN [ 119.318634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.319597] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.320160] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.322172] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 119.322815] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 119.323663] RDX: ffff8880423ab700 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 119.324509] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16a48 [ 119.325346] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 119.326187] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000 [ 119.327027] FS: 00007f0f16373700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 119.327959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.328636] CR2: 00007f77a7d08000 CR3: 0000000012128000 CR4: 0000000000350ef0 [ 119.329456] Call Trace: [ 119.329762] [ 119.330029] ? __pfx_perf_tp_event+0x10/0x10 [ 119.330564] ? stack_depot_save_flags+0x2c/0xa20 [ 119.331143] ? kasan_save_stack+0x34/0x50 [ 119.331634] ? kasan_save_stack+0x24/0x50 [ 119.332127] ? kasan_save_track+0x14/0x30 [ 119.332615] ? __kasan_save_free_info+0x3a/0x60 [ 119.333152] ? __kasan_slab_free+0x3f/0x50 [ 119.333645] ? kmem_cache_free+0x2a1/0x540 [ 119.334145] ? rcu_core+0x7c8/0x1800 [ 119.334600] ? handle_softirqs+0x1b1/0x770 [ 119.335103] ? __irq_exit_rcu+0xc4/0x100 [ 119.335585] ? irq_exit_rcu+0x9/0x20 [ 119.336029] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 119.336623] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.337247] ? vma_start_read+0xa0/0x8e0 [ 119.337723] ? lock_vma_under_rcu+0x11e/0x530 [ 119.338244] ? do_user_addr_fault+0x4aa/0xeb0 [ 119.338781] ? exc_page_fault+0xb0/0x180 [ 119.339260] ? asm_exc_page_fault+0x26/0x30 [ 119.339763] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.340304] ? lock_acquire+0x15e/0x2f0 [ 119.340778] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.341367] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.342060] perf_trace_run_bpf_submit+0xef/0x180 [ 119.342650] perf_trace_lock+0x337/0x5d0 [ 119.343143] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.343685] ? rcu_core+0x7c3/0x1800 [ 119.344129] ? hrtimer_interrupt+0x114/0x830 [ 119.344655] lock_release+0x1ab/0x290 [ 119.345106] ktime_get_update_offsets_now+0xab/0x3c0 [ 119.345721] ? hrtimer_interrupt+0x114/0x830 [ 119.346230] ? __pfx_rcu_core+0x10/0x10 [ 119.346709] hrtimer_interrupt+0x114/0x830 [ 119.347211] ? __local_bh_enable+0x7b/0x90 [ 119.347699] ? handle_softirqs+0x50c/0x770 [ 119.348208] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 119.348813] sysvec_apic_timer_interrupt+0x6b/0x80 [ 119.349382] [ 119.349653] [ 119.349922] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.350532] RIP: 0010:oops_exit+0x0/0x50 [ 119.351026] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 119.353144] RSP: 0018:ffff8880446af490 EFLAGS: 00000202 [ 119.353769] RAX: 00000000000266e9 RBX: 0000000000000216 RCX: ffffc90006ec1000 [ 119.354603] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 119.355440] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 119.356276] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880446af558 [ 119.357105] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 119.357947] ? oops_end+0x4a/0xe0 [ 119.358379] oops_end+0x65/0xe0 [ 119.358781] exc_general_protection+0x1a2/0x330 [ 119.359347] asm_exc_general_protection+0x26/0x30 [ 119.359904] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.360457] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.362529] RSP: 0018:ffff8880446af600 EFLAGS: 00010212 [ 119.363148] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90006ec1000 [ 119.363913] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 119.364686] RBP: ffff8880446af870 R08: ffff88806ce31340 R09: ffffe8ffffc16a48 [ 119.365505] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.366322] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 119.367171] ? perf_tp_event+0x167/0xe70 [ 119.367668] ? __pfx_perf_tp_event+0x10/0x10 [ 119.368228] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.368817] perf_trace_run_bpf_submit+0xef/0x180 [ 119.369392] perf_trace_lock+0x337/0x5d0 [ 119.369878] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.370419] ? lock_acquire+0x15e/0x2f0 [ 119.370893] ? futex_ref_get+0x48/0x300 [ 119.371361] ? futex_ref_get+0x114/0x300 [ 119.371839] ? futex_hash+0x15c/0x390 [ 119.372287] lock_release+0x1ab/0x290 [ 119.372734] ? futex_hash+0x15c/0x390 [ 119.373184] futex_ref_get+0x119/0x300 [ 119.373642] ? futex_hash+0x15c/0x390 [ 119.374098] futex_hash+0x70/0x390 [ 119.374516] futex_wait_setup+0xae/0x550 [ 119.375004] __futex_wait+0x151/0x300 [ 119.375457] ? __pfx___futex_wait+0x10/0x10 [ 119.375964] ? __pfx_futex_wake_mark+0x10/0x10 [ 119.376516] futex_wait+0xde/0x380 [ 119.376939] ? __pfx_futex_wait+0x10/0x10 [ 119.377430] ? perf_trace_lock+0xb5/0x5d0 [ 119.377924] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.378528] do_futex+0x2ee/0x370 [ 119.378954] ? __pfx_do_futex+0x10/0x10 [ 119.379419] ? do_raw_spin_lock+0x123/0x260 [ 119.379931] __x64_sys_futex+0x1c9/0x4d0 [ 119.380406] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.381090] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 119.381698] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.382232] ? kcov_ioctl+0x386/0x6c0 [ 119.382697] do_syscall_64+0xbf/0x360 [ 119.383146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.383738] RIP: 0033:0x7f0f18dfdb19 [ 119.384173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.386248] RSP: 002b:00007f0f16373218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.387121] RAX: ffffffffffffffda RBX: 00007f0f18f10f68 RCX: 00007f0f18dfdb19 [ 119.387923] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0f18f10f68 [ 119.388718] RBP: 00007f0f18f10f60 R08: 00007f0f16373700 R09: 0000000000000000 [ 119.389505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f18f10f6c [ 119.390287] R13: 00007fff131d684f R14: 00007f0f16373300 R15: 0000000000022000 [ 119.391092] [ 119.391358] Modules linked in: [ 119.391725] ---[ end trace 0000000000000000 ]--- [ 119.391727] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI [ 119.392248] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.393107] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 119.393615] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.394295] CPU: 1 UID: 0 PID: 4640 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 119.396309] RSP: 0018:ffff8880446af600 EFLAGS: 00010212 [ 119.397292] Tainted: [D]=DIE, [W]=WARN [ 119.397872] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90006ec1000 [ 119.398180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.398922] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 119.399572] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.400309] RBP: ffff8880446af870 R08: ffff88806ce31340 R09: ffffe8ffffc16a48 [ 119.400671] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.401413] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.402852] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 119.403585] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 119.404012] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 119.404750] FS: 00007f0f16373700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 119.405311] RDX: ffff888046025280 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 119.406130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.406694] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16a48 [ 119.407291] CR2: 00007f77a7d08000 CR3: 0000000012128000 CR4: 0000000000350ef0 [ 119.407844] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 119.408579] Kernel panic - not syncing: Fatal exception in interrupt [ 120.459923] Shutting down cpus with NMI [ 120.460959] Kernel Offset: disabled [ 120.461259] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:34:02 Registers: info registers vcpu 0 RAX=00000000000000e6 RBX=0000000000000009 RCX=00007f740b5b08e1 RDX=00007ffe8415ea50 RSI=0000000000000000 RDI=0000000000000000 RBP=00007ffe8415eadc RSP=00007ffe8415ea10 R8 =0000000000000000 R9 =00007f740b67b000 R10=0000000000000000 R11=0000000000000293 R12=0000000000000032 R13=000000000001b14e R14=0000000000000001 R15=00007ffe8415eb40 RIP=ffffffff81000087 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555742c1400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efef44b42b0 CR3=000000002fee9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff888009747968 RCX=ffff8880097477f4 RDX=1ffff110012e8f3f RSI=ffffffff815c85b8 RDI=ffff888009747974 RBP=ffff8880097479f8 RSP=ffff888009747880 R8 =0000000000000001 R9 =ffff8880097478e0 R10=000000000003be53 R11=000000000002338a R12=ffff888009747968 R13=0000000000000000 R14=ffff88800972b700 R15=ffffea0001115a00 RIP=ffffffff81608883 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555652f2c18 CR3=000000001dd8d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f8d4ec9f7c000007f8d4ec9f7c8 XMM02=00007f8d4ec9f7e000007f8d4ec9f7c0 XMM03=00007f8d4ec9f7c800007f8d4ec9f7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000