syzkaller login: [ 54.743762] sshd (222) used greatest stack depth: 23736 bytes left Warning: Permanently added '[localhost]:21135' (ECDSA) to the list of known hosts. 2024/12/04 08:26:18 fuzzer started 2024/12/04 08:26:19 dialing manager at localhost:46591 [ 63.010323] cgroup: Unknown subsys name 'net' [ 63.087301] cgroup: Unknown subsys name 'cpuset' [ 63.099129] cgroup: Unknown subsys name 'rlimit' 2024/12/04 08:26:37 syscalls: 2217 2024/12/04 08:26:37 code coverage: enabled 2024/12/04 08:26:37 comparison tracing: enabled 2024/12/04 08:26:37 extra coverage: enabled 2024/12/04 08:26:37 setuid sandbox: enabled 2024/12/04 08:26:37 namespace sandbox: enabled 2024/12/04 08:26:37 Android sandbox: enabled 2024/12/04 08:26:37 fault injection: enabled 2024/12/04 08:26:37 leak checking: enabled 2024/12/04 08:26:37 net packet injection: enabled 2024/12/04 08:26:37 net device setup: enabled 2024/12/04 08:26:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/04 08:26:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/04 08:26:37 USB emulation: enabled 2024/12/04 08:26:37 hci packet injection: enabled 2024/12/04 08:26:37 wifi device emulation: enabled 2024/12/04 08:26:37 802.15.4 emulation: enabled 2024/12/04 08:26:37 fetching corpus: 0, signal 0/2000 (executing program) 2024/12/04 08:26:37 fetching corpus: 47, signal 14686/18391 (executing program) 2024/12/04 08:26:37 fetching corpus: 85, signal 27373/32529 (executing program) 2024/12/04 08:26:37 fetching corpus: 134, signal 40507/46847 (executing program) 2024/12/04 08:26:37 fetching corpus: 184, signal 45535/53192 (executing program) 2024/12/04 08:26:37 fetching corpus: 234, signal 50440/59350 (executing program) 2024/12/04 08:26:37 fetching corpus: 284, signal 54490/64560 (executing program) 2024/12/04 08:26:37 fetching corpus: 334, signal 58923/70024 (executing program) 2024/12/04 08:26:38 fetching corpus: 384, signal 61793/74013 (executing program) 2024/12/04 08:26:38 fetching corpus: 434, signal 67019/80044 (executing program) 2024/12/04 08:26:38 fetching corpus: 484, signal 68947/83063 (executing program) 2024/12/04 08:26:38 fetching corpus: 534, signal 72062/87103 (executing program) 2024/12/04 08:26:38 fetching corpus: 584, signal 74663/90594 (executing program) 2024/12/04 08:26:38 fetching corpus: 634, signal 77375/94174 (executing program) 2024/12/04 08:26:38 fetching corpus: 684, signal 80267/97807 (executing program) 2024/12/04 08:26:38 fetching corpus: 734, signal 81835/100236 (executing program) 2024/12/04 08:26:38 fetching corpus: 784, signal 85650/104563 (executing program) 2024/12/04 08:26:38 fetching corpus: 834, signal 87175/106929 (executing program) 2024/12/04 08:26:38 fetching corpus: 884, signal 89624/109979 (executing program) 2024/12/04 08:26:38 fetching corpus: 934, signal 91710/112711 (executing program) 2024/12/04 08:26:38 fetching corpus: 984, signal 94029/115582 (executing program) 2024/12/04 08:26:39 fetching corpus: 1034, signal 96277/118400 (executing program) 2024/12/04 08:26:39 fetching corpus: 1084, signal 97956/120691 (executing program) 2024/12/04 08:26:39 fetching corpus: 1134, signal 99092/122556 (executing program) 2024/12/04 08:26:39 fetching corpus: 1184, signal 100661/124672 (executing program) 2024/12/04 08:26:39 fetching corpus: 1234, signal 102967/127347 (executing program) 2024/12/04 08:26:39 fetching corpus: 1284, signal 103802/128887 (executing program) 2024/12/04 08:26:39 fetching corpus: 1334, signal 105125/130668 (executing program) 2024/12/04 08:26:39 fetching corpus: 1384, signal 107164/132982 (executing program) 2024/12/04 08:26:39 fetching corpus: 1434, signal 108733/134946 (executing program) 2024/12/04 08:26:39 fetching corpus: 1484, signal 110309/136972 (executing program) 2024/12/04 08:26:39 fetching corpus: 1534, signal 111542/138629 (executing program) 2024/12/04 08:26:39 fetching corpus: 1584, signal 113072/140491 (executing program) 2024/12/04 08:26:40 fetching corpus: 1634, signal 114098/142003 (executing program) 2024/12/04 08:26:40 fetching corpus: 1684, signal 115389/143638 (executing program) 2024/12/04 08:26:40 fetching corpus: 1734, signal 116683/145324 (executing program) 2024/12/04 08:26:40 fetching corpus: 1784, signal 117740/146751 (executing program) 2024/12/04 08:26:40 fetching corpus: 1834, signal 118434/147948 (executing program) 2024/12/04 08:26:40 fetching corpus: 1884, signal 119576/149419 (executing program) 2024/12/04 08:26:40 fetching corpus: 1934, signal 120494/150712 (executing program) 2024/12/04 08:26:40 fetching corpus: 1984, signal 121429/151979 (executing program) 2024/12/04 08:26:40 fetching corpus: 2034, signal 122561/153407 (executing program) 2024/12/04 08:26:40 fetching corpus: 2084, signal 123980/154876 (executing program) 2024/12/04 08:26:40 fetching corpus: 2134, signal 124852/156083 (executing program) 2024/12/04 08:26:40 fetching corpus: 2184, signal 126456/157675 (executing program) 2024/12/04 08:26:41 fetching corpus: 2234, signal 127082/158689 (executing program) 2024/12/04 08:26:41 fetching corpus: 2284, signal 127912/159801 (executing program) 2024/12/04 08:26:41 fetching corpus: 2334, signal 128596/160831 (executing program) 2024/12/04 08:26:41 fetching corpus: 2384, signal 129549/161981 (executing program) 2024/12/04 08:26:41 fetching corpus: 2434, signal 130301/163027 (executing program) 2024/12/04 08:26:41 fetching corpus: 2483, signal 131449/164205 (executing program) 2024/12/04 08:26:41 fetching corpus: 2533, signal 132069/165092 (executing program) 2024/12/04 08:26:41 fetching corpus: 2583, signal 132786/166058 (executing program) 2024/12/04 08:26:41 fetching corpus: 2633, signal 133814/167110 (executing program) 2024/12/04 08:26:41 fetching corpus: 2682, signal 134557/168054 (executing program) 2024/12/04 08:26:41 fetching corpus: 2732, signal 135257/168974 (executing program) 2024/12/04 08:26:41 fetching corpus: 2782, signal 135782/169787 (executing program) 2024/12/04 08:26:42 fetching corpus: 2832, signal 136337/170582 (executing program) 2024/12/04 08:26:42 fetching corpus: 2882, signal 137009/171426 (executing program) 2024/12/04 08:26:42 fetching corpus: 2932, signal 137582/172278 (executing program) 2024/12/04 08:26:42 fetching corpus: 2982, signal 138138/173082 (executing program) 2024/12/04 08:26:42 fetching corpus: 3032, signal 138744/173890 (executing program) 2024/12/04 08:26:42 fetching corpus: 3082, signal 139410/174684 (executing program) 2024/12/04 08:26:42 fetching corpus: 3132, signal 139984/175490 (executing program) 2024/12/04 08:26:42 fetching corpus: 3182, signal 140555/176225 (executing program) 2024/12/04 08:26:42 fetching corpus: 3232, signal 141085/176949 (executing program) 2024/12/04 08:26:42 fetching corpus: 3282, signal 141767/177722 (executing program) 2024/12/04 08:26:42 fetching corpus: 3332, signal 142347/178405 (executing program) 2024/12/04 08:26:42 fetching corpus: 3382, signal 142870/179070 (executing program) 2024/12/04 08:26:43 fetching corpus: 3432, signal 143358/179750 (executing program) 2024/12/04 08:26:43 fetching corpus: 3482, signal 144059/180464 (executing program) 2024/12/04 08:26:43 fetching corpus: 3531, signal 144481/181106 (executing program) 2024/12/04 08:26:43 fetching corpus: 3580, signal 145123/181758 (executing program) 2024/12/04 08:26:43 fetching corpus: 3630, signal 145599/182346 (executing program) 2024/12/04 08:26:43 fetching corpus: 3680, signal 146121/182959 (executing program) 2024/12/04 08:26:43 fetching corpus: 3730, signal 146586/183545 (executing program) 2024/12/04 08:26:43 fetching corpus: 3780, signal 147050/184119 (executing program) 2024/12/04 08:26:43 fetching corpus: 3830, signal 147503/184661 (executing program) 2024/12/04 08:26:43 fetching corpus: 3880, signal 148210/185308 (executing program) 2024/12/04 08:26:44 fetching corpus: 3930, signal 148783/185896 (executing program) 2024/12/04 08:26:44 fetching corpus: 3979, signal 149120/186408 (executing program) 2024/12/04 08:26:44 fetching corpus: 4029, signal 149470/186961 (executing program) 2024/12/04 08:26:44 fetching corpus: 4079, signal 149809/187465 (executing program) 2024/12/04 08:26:44 fetching corpus: 4129, signal 150245/187990 (executing program) 2024/12/04 08:26:44 fetching corpus: 4179, signal 150657/188477 (executing program) 2024/12/04 08:26:44 fetching corpus: 4229, signal 151150/188948 (executing program) 2024/12/04 08:26:44 fetching corpus: 4279, signal 151618/189424 (executing program) 2024/12/04 08:26:44 fetching corpus: 4329, signal 152311/189919 (executing program) 2024/12/04 08:26:44 fetching corpus: 4379, signal 152826/190416 (executing program) 2024/12/04 08:26:44 fetching corpus: 4429, signal 153130/190864 (executing program) 2024/12/04 08:26:44 fetching corpus: 4479, signal 154132/191354 (executing program) 2024/12/04 08:26:45 fetching corpus: 4529, signal 154729/191846 (executing program) 2024/12/04 08:26:45 fetching corpus: 4579, signal 155190/192263 (executing program) 2024/12/04 08:26:45 fetching corpus: 4629, signal 155691/192659 (executing program) 2024/12/04 08:26:45 fetching corpus: 4679, signal 156165/193062 (executing program) 2024/12/04 08:26:45 fetching corpus: 4729, signal 156618/193464 (executing program) 2024/12/04 08:26:45 fetching corpus: 4779, signal 157062/193829 (executing program) 2024/12/04 08:26:45 fetching corpus: 4829, signal 157650/193829 (executing program) 2024/12/04 08:26:45 fetching corpus: 4879, signal 158029/193831 (executing program) 2024/12/04 08:26:45 fetching corpus: 4929, signal 158391/193831 (executing program) 2024/12/04 08:26:46 fetching corpus: 4979, signal 158861/193831 (executing program) 2024/12/04 08:26:46 fetching corpus: 5028, signal 159350/193831 (executing program) 2024/12/04 08:26:46 fetching corpus: 5078, signal 159628/193831 (executing program) 2024/12/04 08:26:46 fetching corpus: 5128, signal 160131/193831 (executing program) 2024/12/04 08:26:46 fetching corpus: 5178, signal 160550/193831 (executing program) 2024/12/04 08:26:46 fetching corpus: 5228, signal 161010/193831 (executing program) 2024/12/04 08:26:46 fetching corpus: 5278, signal 161418/193831 (executing program) 2024/12/04 08:26:46 fetching corpus: 5328, signal 161799/193851 (executing program) 2024/12/04 08:26:46 fetching corpus: 5378, signal 163027/193851 (executing program) 2024/12/04 08:26:46 fetching corpus: 5428, signal 163302/193851 (executing program) 2024/12/04 08:26:47 fetching corpus: 5478, signal 163815/193887 (executing program) 2024/12/04 08:26:47 fetching corpus: 5528, signal 164219/193888 (executing program) 2024/12/04 08:26:47 fetching corpus: 5578, signal 164489/193888 (executing program) 2024/12/04 08:26:47 fetching corpus: 5628, signal 164861/193888 (executing program) 2024/12/04 08:26:47 fetching corpus: 5678, signal 165353/193888 (executing program) 2024/12/04 08:26:47 fetching corpus: 5728, signal 165603/193888 (executing program) 2024/12/04 08:26:47 fetching corpus: 5778, signal 165943/193888 (executing program) 2024/12/04 08:26:47 fetching corpus: 5828, signal 166414/193888 (executing program) 2024/12/04 08:26:47 fetching corpus: 5878, signal 166765/193888 (executing program) 2024/12/04 08:26:47 fetching corpus: 5928, signal 167127/193888 (executing program) 2024/12/04 08:26:47 fetching corpus: 5978, signal 167388/193888 (executing program) 2024/12/04 08:26:48 fetching corpus: 6028, signal 167650/193903 (executing program) 2024/12/04 08:26:48 fetching corpus: 6078, signal 167885/193903 (executing program) 2024/12/04 08:26:48 fetching corpus: 6128, signal 168149/193903 (executing program) 2024/12/04 08:26:48 fetching corpus: 6178, signal 168434/193903 (executing program) 2024/12/04 08:26:48 fetching corpus: 6228, signal 168857/193903 (executing program) 2024/12/04 08:26:48 fetching corpus: 6278, signal 169202/193903 (executing program) 2024/12/04 08:26:48 fetching corpus: 6328, signal 169553/193903 (executing program) 2024/12/04 08:26:48 fetching corpus: 6378, signal 169862/193903 (executing program) 2024/12/04 08:26:48 fetching corpus: 6426, signal 170182/193903 (executing program) 2024/12/04 08:26:48 fetching corpus: 6476, signal 170507/193910 (executing program) 2024/12/04 08:26:48 fetching corpus: 6526, signal 170782/193910 (executing program) 2024/12/04 08:26:48 fetching corpus: 6576, signal 171007/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 6626, signal 171366/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 6675, signal 171609/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 6725, signal 171878/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 6775, signal 172063/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 6825, signal 172317/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 6875, signal 172569/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 6925, signal 172861/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 6975, signal 173649/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 7025, signal 174214/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 7075, signal 174469/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 7124, signal 174746/193910 (executing program) 2024/12/04 08:26:49 fetching corpus: 7173, signal 175072/193930 (executing program) 2024/12/04 08:26:49 fetching corpus: 7223, signal 175332/193930 (executing program) 2024/12/04 08:26:49 fetching corpus: 7273, signal 175574/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7323, signal 175968/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7373, signal 176312/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7423, signal 176560/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7473, signal 176737/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7523, signal 177197/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7573, signal 177443/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7622, signal 177750/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7672, signal 178132/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7722, signal 178460/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7772, signal 178758/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7822, signal 179002/193935 (executing program) 2024/12/04 08:26:50 fetching corpus: 7872, signal 179284/193935 (executing program) 2024/12/04 08:26:51 fetching corpus: 7922, signal 179884/193935 (executing program) 2024/12/04 08:26:51 fetching corpus: 7972, signal 180065/193935 (executing program) 2024/12/04 08:26:51 fetching corpus: 8022, signal 180243/193950 (executing program) 2024/12/04 08:26:51 fetching corpus: 8072, signal 180535/193950 (executing program) 2024/12/04 08:26:51 fetching corpus: 8122, signal 180835/193952 (executing program) 2024/12/04 08:26:51 fetching corpus: 8171, signal 181022/193952 (executing program) 2024/12/04 08:26:51 fetching corpus: 8221, signal 181266/193952 (executing program) 2024/12/04 08:26:51 fetching corpus: 8271, signal 181560/193952 (executing program) 2024/12/04 08:26:51 fetching corpus: 8321, signal 181776/193952 (executing program) 2024/12/04 08:26:51 fetching corpus: 8371, signal 181945/193958 (executing program) 2024/12/04 08:26:51 fetching corpus: 8421, signal 182141/193992 (executing program) 2024/12/04 08:26:51 fetching corpus: 8471, signal 182388/193992 (executing program) 2024/12/04 08:26:52 fetching corpus: 8521, signal 182713/194000 (executing program) 2024/12/04 08:26:52 fetching corpus: 8571, signal 183064/194000 (executing program) 2024/12/04 08:26:52 fetching corpus: 8621, signal 183352/194000 (executing program) 2024/12/04 08:26:52 fetching corpus: 8671, signal 183602/194000 (executing program) 2024/12/04 08:26:52 fetching corpus: 8721, signal 183809/194000 (executing program) 2024/12/04 08:26:52 fetching corpus: 8771, signal 184006/194000 (executing program) 2024/12/04 08:26:52 fetching corpus: 8821, signal 184244/194000 (executing program) 2024/12/04 08:26:52 fetching corpus: 8871, signal 184475/194000 (executing program) 2024/12/04 08:26:52 fetching corpus: 8921, signal 184719/194000 (executing program) 2024/12/04 08:26:52 fetching corpus: 8969, signal 185113/194006 (executing program) 2024/12/04 08:26:52 fetching corpus: 9019, signal 185343/194006 (executing program) 2024/12/04 08:26:52 fetching corpus: 9069, signal 185623/194006 (executing program) 2024/12/04 08:26:52 fetching corpus: 9119, signal 185905/194006 (executing program) 2024/12/04 08:26:53 fetching corpus: 9169, signal 186218/194006 (executing program) 2024/12/04 08:26:53 fetching corpus: 9219, signal 186478/194036 (executing program) 2024/12/04 08:26:53 fetching corpus: 9269, signal 186840/194036 (executing program) 2024/12/04 08:26:53 fetching corpus: 9319, signal 187025/194036 (executing program) 2024/12/04 08:26:53 fetching corpus: 9369, signal 187249/194036 (executing program) 2024/12/04 08:26:53 fetching corpus: 9419, signal 187462/194036 (executing program) 2024/12/04 08:26:53 fetching corpus: 9469, signal 187660/194039 (executing program) 2024/12/04 08:26:53 fetching corpus: 9519, signal 187927/194039 (executing program) 2024/12/04 08:26:53 fetching corpus: 9569, signal 188223/194039 (executing program) 2024/12/04 08:26:53 fetching corpus: 9618, signal 188474/194057 (executing program) 2024/12/04 08:26:53 fetching corpus: 9668, signal 188696/194057 (executing program) 2024/12/04 08:26:53 fetching corpus: 9718, signal 188884/194057 (executing program) 2024/12/04 08:26:53 fetching corpus: 9768, signal 189088/194057 (executing program) 2024/12/04 08:26:53 fetching corpus: 9818, signal 189466/194057 (executing program) 2024/12/04 08:26:54 fetching corpus: 9868, signal 189626/194057 (executing program) 2024/12/04 08:26:54 fetching corpus: 9918, signal 190235/194057 (executing program) 2024/12/04 08:26:54 fetching corpus: 9968, signal 190489/194066 (executing program) 2024/12/04 08:26:54 fetching corpus: 10018, signal 190657/194066 (executing program) 2024/12/04 08:26:54 fetching corpus: 10068, signal 190851/194066 (executing program) 2024/12/04 08:26:54 fetching corpus: 10118, signal 191066/194066 (executing program) 2024/12/04 08:26:54 fetching corpus: 10167, signal 191317/194067 (executing program) 2024/12/04 08:26:54 fetching corpus: 10217, signal 191524/194067 (executing program) 2024/12/04 08:26:54 fetching corpus: 10267, signal 191764/194067 (executing program) 2024/12/04 08:26:54 fetching corpus: 10317, signal 191921/194104 (executing program) 2024/12/04 08:26:54 fetching corpus: 10367, signal 192132/194104 (executing program) 2024/12/04 08:26:54 fetching corpus: 10417, signal 192332/194104 (executing program) 2024/12/04 08:26:55 fetching corpus: 10467, signal 192536/194104 (executing program) 2024/12/04 08:26:55 fetching corpus: 10492, signal 192702/194129 (executing program) 2024/12/04 08:26:55 fetching corpus: 10493, signal 192703/194129 (executing program) 2024/12/04 08:26:55 fetching corpus: 10493, signal 192703/194129 (executing program) 2024/12/04 08:26:57 starting 8 fuzzer processes 08:26:57 executing program 0: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r0, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 08:26:57 executing program 1: ioperm(0x0, 0x6d1f, 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:26:57 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) dup2(r0, r1) [ 99.301828] audit: type=1400 audit(1733300817.627:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:26:57 executing program 3: r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 08:26:57 executing program 5: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 08:26:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x2f, 0x0, 0x0, 0x0, @pid}]}]}, 0x2c}], 0x1}, 0x0) 08:26:57 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x22, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0xffffffff00000000}}]}, 0x24}], 0x1}, 0x0) 08:26:57 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 100.693115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.695845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.698240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.700560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.705106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.708956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.711534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.716833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.720250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.722012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.734786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 100.738716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.766553] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.792035] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.795294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.797139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.801576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.805352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.807901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.812925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.815577] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.817496] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.833627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.836891] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 100.844009] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.852557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.861566] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.866397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.868733] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.873813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 100.876796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 100.878579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.878888] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 100.882558] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 100.884565] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 100.887096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.889269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.890315] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.891007] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.893003] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 100.895271] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 100.899061] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 100.900679] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 100.903086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 100.904914] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 100.924248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.962743] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.972904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 102.835257] Bluetooth: hci1: command tx timeout [ 102.835474] Bluetooth: hci0: command tx timeout [ 102.898252] Bluetooth: hci4: command tx timeout [ 102.962341] Bluetooth: hci3: command tx timeout [ 102.962495] Bluetooth: hci7: command tx timeout [ 102.963337] Bluetooth: hci2: command tx timeout [ 103.027228] Bluetooth: hci5: command tx timeout [ 103.027240] Bluetooth: hci6: command tx timeout [ 104.884273] Bluetooth: hci1: command tx timeout [ 104.884306] Bluetooth: hci0: command tx timeout [ 104.946324] Bluetooth: hci4: command tx timeout [ 105.010357] Bluetooth: hci7: command tx timeout [ 105.011131] Bluetooth: hci3: command tx timeout [ 105.012197] Bluetooth: hci2: command tx timeout [ 105.074434] Bluetooth: hci6: command tx timeout [ 105.075099] Bluetooth: hci5: command tx timeout [ 106.930287] Bluetooth: hci1: command tx timeout [ 106.930799] Bluetooth: hci0: command tx timeout [ 106.995256] Bluetooth: hci4: command tx timeout [ 107.058333] Bluetooth: hci2: command tx timeout [ 107.058848] Bluetooth: hci3: command tx timeout [ 107.058877] Bluetooth: hci7: command tx timeout [ 107.122247] Bluetooth: hci6: command tx timeout [ 107.122725] Bluetooth: hci5: command tx timeout [ 108.980302] Bluetooth: hci1: command tx timeout [ 108.980807] Bluetooth: hci0: command tx timeout [ 109.042385] Bluetooth: hci4: command tx timeout [ 109.106454] Bluetooth: hci2: command tx timeout [ 109.106909] Bluetooth: hci3: command tx timeout [ 109.107561] Bluetooth: hci7: command tx timeout [ 109.170573] Bluetooth: hci6: command tx timeout [ 109.171070] Bluetooth: hci5: command tx timeout [ 156.572823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.573611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.760204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.760834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.070691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.071554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.212348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.213018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.348033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.348758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.478859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.479938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.617594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.618297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.752883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.753571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:27:56 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) dup2(r0, r1) [ 157.825292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.825942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:27:56 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) dup2(r0, r1) [ 157.953018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.953953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:27:56 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) dup2(r0, r1) [ 158.086687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.087371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.210394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.211039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.333492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.334352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.422396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.423053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.579343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.580029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.826828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.827598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.624532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.632640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.635056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.640596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.648895] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.652122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.698540] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.702533] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.704506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.714781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.718697] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 162.720612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.777698] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 162.789538] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 162.793863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 162.801358] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 162.810358] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 162.813010] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 164.722293] Bluetooth: hci3: command tx timeout [ 164.787238] Bluetooth: hci4: command tx timeout [ 164.851209] Bluetooth: hci6: command tx timeout [ 166.770289] Bluetooth: hci3: command tx timeout [ 166.834316] Bluetooth: hci4: command tx timeout [ 166.898205] Bluetooth: hci6: command tx timeout [ 168.818192] Bluetooth: hci3: command tx timeout [ 168.882310] Bluetooth: hci4: command tx timeout [ 168.946403] Bluetooth: hci6: command tx timeout [ 170.867262] Bluetooth: hci3: command tx timeout [ 170.930230] Bluetooth: hci4: command tx timeout [ 170.994209] Bluetooth: hci6: command tx timeout [ 183.480235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.480889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.598764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.599609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.846284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.846955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.893794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.894667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.172887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.173592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.220832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.221614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:28:24 executing program 0: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r0, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 08:28:24 executing program 1: ioperm(0x0, 0x6d1f, 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:28:24 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 08:28:24 executing program 3: r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 08:28:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x2f, 0x0, 0x0, 0x0, @pid}]}]}, 0x2c}], 0x1}, 0x0) 08:28:24 executing program 5: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 08:28:24 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x22, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0xffffffff00000000}}]}, 0x24}], 0x1}, 0x0) 08:28:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, &(0x7f0000000080)) [ 185.764268] audit: type=1400 audit(1733300904.090:8): avc: denied { open } for pid=5311 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 185.768425] audit: type=1400 audit(1733300904.090:9): avc: denied { kernel } for pid=5311 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:28:24 executing program 5: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 08:28:24 executing program 3: r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 08:28:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, &(0x7f0000000080)) 08:28:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x2f, 0x0, 0x0, 0x0, @pid}]}]}, 0x2c}], 0x1}, 0x0) 08:28:24 executing program 1: ioperm(0x0, 0x6d1f, 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:28:24 executing program 5: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 08:28:24 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 08:28:24 executing program 3: r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 08:28:24 executing program 0: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r0, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 08:28:24 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x22, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0xffffffff00000000}}]}, 0x24}], 0x1}, 0x0) 08:28:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, &(0x7f0000000080)) 08:28:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x2f, 0x0, 0x0, 0x0, @pid}]}]}, 0x2c}], 0x1}, 0x0) 08:28:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, &(0x7f0000000080)) 08:28:24 executing program 5: mremap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x5, 0xffffffffffffffff) mremap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) 08:28:24 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000100)=""/13, 0xd) 08:28:24 executing program 1: ioperm(0x0, 0x6d1f, 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:28:24 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 08:28:25 executing program 5: mremap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x5, 0xffffffffffffffff) mremap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) 08:28:25 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x22, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0xffffffff00000000}}]}, 0x24}], 0x1}, 0x0) 08:28:25 executing program 0: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r0, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 08:28:25 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mlockall(0x5) 08:28:25 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000100)=""/13, 0xd) 08:28:25 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 08:28:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 08:28:25 executing program 1: timer_create(0x2, 0x0, &(0x7f00000006c0)) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, r1+60000000}}, 0x0) 08:28:25 executing program 5: mremap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x5, 0xffffffffffffffff) mremap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) 08:28:25 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000100)=""/13, 0xd) 08:28:25 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 08:28:25 executing program 1: timer_create(0x2, 0x0, &(0x7f00000006c0)) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, r1+60000000}}, 0x0) 08:28:25 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 08:28:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 08:28:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) 08:28:25 executing program 5: mremap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x5, 0xffffffffffffffff) mremap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) 08:28:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000980)={0x0, 0x0, 0x8, 0x13, 0x100, &(0x7f0000000580)="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"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 08:28:25 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000100)=""/13, 0xd) 08:28:25 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 08:28:25 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 08:28:25 executing program 1: timer_create(0x2, 0x0, &(0x7f00000006c0)) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, r1+60000000}}, 0x0) 08:28:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendfile(r2, r1, 0x0, 0x4000000000004) 08:28:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) 08:28:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 08:28:25 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 08:28:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}}, 0x0) 08:28:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000001400), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127c, 0x0) 08:28:26 executing program 1: timer_create(0x2, 0x0, &(0x7f00000006c0)) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, r1+60000000}}, 0x0) 08:28:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000001400), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127c, 0x0) 08:28:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 08:28:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) 08:28:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}}, 0x0) 08:28:26 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 08:28:26 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) move_pages(0x0, 0x2, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000001040), &(0x7f0000001080), 0x0) 08:28:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x18, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000680)=0x1000, 0x4) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 08:28:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) 08:28:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') pread64(r0, &(0x7f0000002700)=""/4066, 0xfe2, 0x0) 08:28:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}}, 0x0) 08:28:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1f, 0x80, 0x0, 0x0, 0x0, 0x1, 0x80028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp, 0x2010, 0x5, 0x10000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x89f, 0x9, 0x0, 0x9, 0x4, [{0x7c, 0xb, 0x3, '\x00', 0xa84}, {0x0, 0x4, 0xffffffff}, {0x4, 0x0, 0x10000, '\x00', 0x1}, {0x1800000000000, 0x400, 0xfffffffffffffffc, '\x00', 0x1c86}]}) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x11) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') sendfile(r3, r1, 0x0, 0x10000027f) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 08:28:26 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) move_pages(0x0, 0x2, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000001040), &(0x7f0000001080), 0x0) [ 188.124590] hrtimer: interrupt took 37681 ns 08:28:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000001400), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127c, 0x0) 08:28:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x200, 0x4) 08:28:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}}, 0x0) 08:28:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x18, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000680)=0x1000, 0x4) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 08:28:27 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, r0) 08:28:27 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) move_pages(0x0, 0x2, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000001040), &(0x7f0000001080), 0x0) 08:28:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') pread64(r0, &(0x7f0000002700)=""/4066, 0xfe2, 0x0) 08:28:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1f, 0x80, 0x0, 0x0, 0x0, 0x1, 0x80028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp, 0x2010, 0x5, 0x10000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x89f, 0x9, 0x0, 0x9, 0x4, [{0x7c, 0xb, 0x3, '\x00', 0xa84}, {0x0, 0x4, 0xffffffff}, {0x4, 0x0, 0x10000, '\x00', 0x1}, {0x1800000000000, 0x400, 0xfffffffffffffffc, '\x00', 0x1c86}]}) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x11) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') sendfile(r3, r1, 0x0, 0x10000027f) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 08:28:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000001400), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127c, 0x0) 08:28:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x200, 0x4) 08:28:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1f, 0x80, 0x0, 0x0, 0x0, 0x1, 0x80028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp, 0x2010, 0x5, 0x10000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x89f, 0x9, 0x0, 0x9, 0x4, [{0x7c, 0xb, 0x3, '\x00', 0xa84}, {0x0, 0x4, 0xffffffff}, {0x4, 0x0, 0x10000, '\x00', 0x1}, {0x1800000000000, 0x400, 0xfffffffffffffffc, '\x00', 0x1c86}]}) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x11) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') sendfile(r3, r1, 0x0, 0x10000027f) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 08:28:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1f, 0x80, 0x0, 0x0, 0x0, 0x1, 0x80028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp, 0x2010, 0x5, 0x10000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x89f, 0x9, 0x0, 0x9, 0x4, [{0x7c, 0xb, 0x3, '\x00', 0xa84}, {0x0, 0x4, 0xffffffff}, {0x4, 0x0, 0x10000, '\x00', 0x1}, {0x1800000000000, 0x400, 0xfffffffffffffffc, '\x00', 0x1c86}]}) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x11) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') sendfile(r3, r1, 0x0, 0x10000027f) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 08:28:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x200, 0x4) 08:28:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x200, 0x4) 08:28:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x18, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000680)=0x1000, 0x4) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 08:28:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x18, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000680)=0x1000, 0x4) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 08:28:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1f, 0x80, 0x0, 0x0, 0x0, 0x1, 0x80028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp, 0x2010, 0x5, 0x10000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x89f, 0x9, 0x0, 0x9, 0x4, [{0x7c, 0xb, 0x3, '\x00', 0xa84}, {0x0, 0x4, 0xffffffff}, {0x4, 0x0, 0x10000, '\x00', 0x1}, {0x1800000000000, 0x400, 0xfffffffffffffffc, '\x00', 0x1c86}]}) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x11) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') sendfile(r3, r1, 0x0, 0x10000027f) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 08:28:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1f, 0x80, 0x0, 0x0, 0x0, 0x1, 0x80028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp, 0x2010, 0x5, 0x10000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x89f, 0x9, 0x0, 0x9, 0x4, [{0x7c, 0xb, 0x3, '\x00', 0xa84}, {0x0, 0x4, 0xffffffff}, {0x4, 0x0, 0x10000, '\x00', 0x1}, {0x1800000000000, 0x400, 0xfffffffffffffffc, '\x00', 0x1c86}]}) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x11) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') sendfile(r3, r1, 0x0, 0x10000027f) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 08:28:28 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) move_pages(0x0, 0x2, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000001040), &(0x7f0000001080), 0x0) 08:28:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x18, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000680)=0x1000, 0x4) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) [ 224.568772] Bluetooth: hci7: command 0x0406 tx timeout [ 224.570064] Bluetooth: hci0: command 0x0406 tx timeout [ 224.755868] Bluetooth: hci5: command 0x0406 tx timeout [ 224.756924] Bluetooth: hci1: command 0x0406 tx timeout [ 224.757886] Bluetooth: hci2: command 0x0406 tx timeout 08:29:07 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, r0) 08:29:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1f, 0x80, 0x0, 0x0, 0x0, 0x1, 0x80028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp, 0x2010, 0x5, 0x10000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x89f, 0x9, 0x0, 0x9, 0x4, [{0x7c, 0xb, 0x3, '\x00', 0xa84}, {0x0, 0x4, 0xffffffff}, {0x4, 0x0, 0x10000, '\x00', 0x1}, {0x1800000000000, 0x400, 0xfffffffffffffffc, '\x00', 0x1c86}]}) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x11) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') sendfile(r3, r1, 0x0, 0x10000027f) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 08:29:07 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/softnet_stat\x00') pread64(r0, &(0x7f0000000140)=""/164, 0xa4, 0x80000000) 08:29:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1f, 0x80, 0x0, 0x0, 0x0, 0x1, 0x80028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp, 0x2010, 0x5, 0x10000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x89f, 0x9, 0x0, 0x9, 0x4, [{0x7c, 0xb, 0x3, '\x00', 0xa84}, {0x0, 0x4, 0xffffffff}, {0x4, 0x0, 0x10000, '\x00', 0x1}, {0x1800000000000, 0x400, 0xfffffffffffffffc, '\x00', 0x1c86}]}) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x11) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') sendfile(r3, r1, 0x0, 0x10000027f) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 08:29:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') pread64(r0, &(0x7f0000002700)=""/4066, 0xfe2, 0x0) 08:29:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1f, 0x80, 0x0, 0x0, 0x0, 0x1, 0x80028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp, 0x2010, 0x5, 0x10000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x89f, 0x9, 0x0, 0x9, 0x4, [{0x7c, 0xb, 0x3, '\x00', 0xa84}, {0x0, 0x4, 0xffffffff}, {0x4, 0x0, 0x10000, '\x00', 0x1}, {0x1800000000000, 0x400, 0xfffffffffffffffc, '\x00', 0x1c86}]}) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x11) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') sendfile(r3, r1, 0x0, 0x10000027f) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 08:29:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x18, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000680)=0x1000, 0x4) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 08:29:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x18, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000680)=0x1000, 0x4) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 08:29:09 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, r0) 08:29:09 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/softnet_stat\x00') pread64(r0, &(0x7f0000000140)=""/164, 0xa4, 0x80000000) 08:29:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') pread64(r0, &(0x7f0000002700)=""/4066, 0xfe2, 0x0) 08:29:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1f, 0x80, 0x0, 0x0, 0x0, 0x1, 0x80028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp, 0x2010, 0x5, 0x10000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x89f, 0x9, 0x0, 0x9, 0x4, [{0x7c, 0xb, 0x3, '\x00', 0xa84}, {0x0, 0x4, 0xffffffff}, {0x4, 0x0, 0x10000, '\x00', 0x1}, {0x1800000000000, 0x400, 0xfffffffffffffffc, '\x00', 0x1c86}]}) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x11) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') sendfile(r3, r1, 0x0, 0x10000027f) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 08:29:09 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x0, 0x51, 0x0, 0x0) 08:29:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) 08:29:09 executing program 0: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:29:09 executing program 4: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 08:29:09 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x0, 0x51, 0x0, 0x0) 08:29:09 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x524fbe1}}]}}) 08:29:09 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, r0) 08:29:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) 08:29:09 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/softnet_stat\x00') pread64(r0, &(0x7f0000000140)=""/164, 0xa4, 0x80000000) [ 231.040091] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 231.044945] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65380 sclass=netlink_tcpdiag_socket pid=59 comm=kworker/0:2 08:29:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/softnet_stat\x00') pread64(r0, &(0x7f0000000140)=""/164, 0xa4, 0x80000000) 08:29:59 executing program 6: r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='{.,-^\x00', &(0x7f0000000040)='\x00', 0x0) 08:29:59 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40201, 0x0) write$binfmt_aout(r0, &(0x7f0000000240), 0x20) 08:29:59 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 08:29:59 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x0, 0x51, 0x0, 0x0) 08:29:59 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x524fbe1}}]}}) 08:29:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0xa1c, 0x1000}, {0x0, 0x8}], 0x2, 0x0) 08:29:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) [ 281.381634] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 281.390505] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65380 sclass=netlink_tcpdiag_socket pid=10 comm=kworker/0:1 08:29:59 executing program 6: r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='{.,-^\x00', &(0x7f0000000040)='\x00', 0x0) 08:29:59 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40201, 0x0) write$binfmt_aout(r0, &(0x7f0000000240), 0x20) 08:29:59 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40201, 0x0) write$binfmt_aout(r0, &(0x7f0000000240), 0x20) 08:29:59 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x0, 0x51, 0x0, 0x0) 08:29:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) 08:30:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x9]}, 0x8) 08:30:00 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40201, 0x0) write$binfmt_aout(r0, &(0x7f0000000240), 0x20) 08:30:00 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40201, 0x0) write$binfmt_aout(r0, &(0x7f0000000240), 0x20) 08:30:00 executing program 6: r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='{.,-^\x00', &(0x7f0000000040)='\x00', 0x0) [ 284.744472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.747033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.749153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.754172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.756715] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.758537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.003652] Bluetooth: hci6: command 0x0406 tx timeout [ 286.004598] Bluetooth: hci4: command 0x0406 tx timeout [ 286.770236] Bluetooth: hci3: command tx timeout [ 288.818649] Bluetooth: hci3: command tx timeout [ 290.866329] Bluetooth: hci3: command tx timeout [ 292.914238] Bluetooth: hci3: command tx timeout [ 313.825201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.826503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.957402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.958748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:30:32 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x524fbe1}}]}}) 08:30:32 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/4093, 0xfffffffffffffea8, 0x0) 08:30:32 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40201, 0x0) write$binfmt_aout(r0, &(0x7f0000000240), 0x20) 08:30:32 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40201, 0x0) write$binfmt_aout(r0, &(0x7f0000000240), 0x20) 08:30:32 executing program 6: r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='{.,-^\x00', &(0x7f0000000040)='\x00', 0x0) 08:30:32 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x401a012, r0, 0x0) 08:30:32 executing program 4: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='*-\x00', &(0x7f0000000100)='\v', 0x80000) 08:30:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) [ 314.890927] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 314.902790] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65380 sclass=netlink_tcpdiag_socket pid=10 comm=kworker/0:1 08:30:33 executing program 4: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='*-\x00', &(0x7f0000000100)='\v', 0x80000) 08:30:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 08:30:33 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000140)=0xa4ffffff, 0x4) 08:30:33 executing program 4: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='*-\x00', &(0x7f0000000100)='\v', 0x80000) 08:30:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x44, r1, 0x39, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0xfffffffffffffd5b, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x44}}, 0x0) 08:30:33 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x401a012, r0, 0x0) [ 315.193703] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 315.237720] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 08:30:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 08:30:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)='o', 0x1}], 0x2}, 0x0) 08:30:34 executing program 2: rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = epoll_create(0x1) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x3, 0x0, 0x0) 08:30:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x24, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}]}, 0x24}], 0x1}, 0x0) 08:30:34 executing program 3: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 08:30:34 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x524fbe1}}]}}) 08:30:34 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x401a012, r0, 0x0) 08:30:34 executing program 4: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='*-\x00', &(0x7f0000000100)='\v', 0x80000) [ 315.791247] audit: type=1400 audit(1733301034.114:10): avc: denied { block_suspend } for pid=6098 comm="syz-executor.3" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 08:30:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = dup(r2) pidfd_send_signal(r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffff7}, 0x0) 08:30:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) chdir(&(0x7f0000000740)='./file0\x00') [ 315.973689] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 315.980400] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65380 sclass=netlink_tcpdiag_socket pid=42 comm=kworker/1:1 08:30:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x3c, 0x0, &(0x7f00000035c0)) 08:30:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000009f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000009e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, 0x0) 08:30:34 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x401a012, r0, 0x0) 08:30:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 08:30:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') 08:30:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = dup(r2) pidfd_send_signal(r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffff7}, 0x0) 08:30:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) chdir(&(0x7f0000000740)='./file0\x00') 08:30:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) chdir(&(0x7f0000000740)='./file0\x00') 08:30:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 08:30:35 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040)=0x1, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000040)=0x1, 0x3) 08:30:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) 08:30:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) chdir(&(0x7f0000000740)='./file0\x00') 08:30:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = dup(r2) pidfd_send_signal(r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffff7}, 0x0) 08:30:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) chdir(&(0x7f0000000740)='./file0\x00') 08:30:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) [ 316.869866] loop1: detected capacity change from 0 to 40 [ 316.897189] syz-executor.1: attempt to access beyond end of device [ 316.897189] loop1: rw=2051, sector=24, nr_sectors = 104 limit=40 08:30:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 08:30:35 executing program 0: arch_prctl$ARCH_SET_CPUID(0x1025, 0x0) 08:30:35 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000380)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_retopts={{0x10, 0x0, 0x8}}], 0x10}, 0x0) 08:30:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) chdir(&(0x7f0000000740)='./file0\x00') 08:30:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) chdir(&(0x7f0000000740)='./file0\x00') 08:30:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) 08:30:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = dup(r2) pidfd_send_signal(r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffff7}, 0x0) 08:30:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) [ 317.159433] loop1: detected capacity change from 0 to 40 08:30:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 08:30:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)="95", 0x1}], 0x1}}], 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000142, 0x0, 0x0) [ 317.214619] syz-executor.1: attempt to access beyond end of device [ 317.214619] loop1: rw=2051, sector=24, nr_sectors = 104 limit=40 [ 317.431182] loop1: detected capacity change from 0 to 40 08:30:35 executing program 6: syz_emit_ethernet(0x193, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c20000002cf3dc516e8586dd6965b772015d0000fe8000000000000000000000000000aa000000000000000000000000000000005c1a00000000000004012080"], 0x0) 08:30:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) 08:30:35 executing program 5: semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) 08:30:35 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x0, 0x0) 08:30:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 08:30:35 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 08:30:35 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x40b42, 0x0) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r1 = clone3(&(0x7f0000000400)={0x4800, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x24}, &(0x7f0000000340)=""/14, 0xe, &(0x7f0000000380)=""/35, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xfd3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8, 0x0, 0x0, 0x8, 0xffffffffffffcc20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100001a, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x7, &(0x7f0000000040)=0x1, 0x4) 08:30:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 08:30:35 executing program 6: r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:30:35 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}, 0x0) [ 317.560214] syz_tun: entered promiscuous mode [ 317.565310] syz_tun: left promiscuous mode [ 317.571844] syz-executor.1: attempt to access beyond end of device [ 317.571844] loop1: rw=2051, sector=24, nr_sectors = 104 limit=40 08:30:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 08:30:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) [ 317.727607] syz_tun: entered promiscuous mode [ 317.789523] syz_tun: left promiscuous mode [ 317.819530] loop1: detected capacity change from 0 to 40 [ 317.840962] syz-executor.1: attempt to access beyond end of device [ 317.840962] loop1: rw=2051, sector=24, nr_sectors = 104 limit=40 08:30:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 08:30:36 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 08:30:36 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) poll(0x0, 0x0, 0x0) 08:30:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5460, &(0x7f00000001c0)=0x800) 08:30:36 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x800101, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)="ed5fbe2b569b4c8c2340eb7b410c984c4d6e64bd68cf84ec672138dd2a5005c811ada217ddcb6f4274ffd3e9c603c3cec504512df9e2ce9d45fdc60d493388dc93b88d8bfcdc37958f7bb658c1c175", 0x4f}, {&(0x7f00000001c0)="421df8ff26e72f3861a34f9bd6b65814914ab4732f847ed3f82b0719f86fe8c88a3a98433d69c061e3ef393a875568a5dbb22b751a15a9b7555ba7d35ead6f74a74ea212c6d67822f19ff607540b7c35154a338de3", 0x55}], 0x2) 08:30:36 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x10) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x91) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001600), 0x40, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000022c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002280)={&(0x7f0000002180)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x3c}}, 0x0) socketpair(0x10, 0x0, 0x0, &(0x7f0000002300)) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), r0) 08:30:36 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) sendto(r0, &(0x7f00000002c0)="ae", 0x1, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) 08:30:36 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x40b42, 0x0) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r1 = clone3(&(0x7f0000000400)={0x4800, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x24}, &(0x7f0000000340)=""/14, 0xe, &(0x7f0000000380)=""/35, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xfd3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8, 0x0, 0x0, 0x8, 0xffffffffffffcc20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100001a, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x7, &(0x7f0000000040)=0x1, 0x4) 08:30:36 executing program 3: ioperm(0x0, 0x5, 0x157) modify_ldt$write(0xffffc90000000011, 0x0, 0x0) [ 318.503408] syz_tun: entered promiscuous mode [ 318.516908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.523182] Bluetooth: hci0: Opcode 0x0406 failed: -4 08:30:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) [ 319.269790] syz_tun: left promiscuous mode [ 319.368480] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.369173] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 319.466026] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 319.466819] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 319.612438] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 319.613253] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 319.625930] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 319.631783] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 319.647857] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.659956] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 319.668076] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 319.672452] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 319.695743] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.696537] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 319.701763] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 319.794378] Bluetooth: hci0: command 0x0406 tx timeout 08:30:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 08:30:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5460, &(0x7f00000001c0)=0x800) [ 321.405843] Bluetooth: hci1: command 0x0406 tx timeout [ 321.714210] Bluetooth: hci3: command 0x0c1a tx timeout [ 321.714998] Bluetooth: hci6: command 0x0406 tx timeout [ 321.720124] Bluetooth: hci2: command 0x0406 tx timeout [ 321.720861] Bluetooth: hci4: command 0x0406 tx timeout [ 321.721602] Bluetooth: hci7: command 0x0406 tx timeout [ 321.722311] Bluetooth: hci5: command 0x0406 tx timeout [ 321.842189] Bluetooth: hci0: command 0x0406 tx timeout [ 323.442343] Bluetooth: hci1: command 0x0406 tx timeout [ 323.762317] Bluetooth: hci2: command 0x0406 tx timeout [ 323.763214] Bluetooth: hci5: command 0x0406 tx timeout [ 323.763961] Bluetooth: hci7: command 0x0406 tx timeout [ 323.764809] Bluetooth: hci4: command 0x0406 tx timeout [ 323.765616] Bluetooth: hci6: command 0x0406 tx timeout [ 323.766473] Bluetooth: hci3: command 0x0c1a tx timeout [ 325.810243] Bluetooth: hci3: command 0x0c1a tx timeout 08:30:57 executing program 6: r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:30:57 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) sched_yield() 08:30:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 08:30:57 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x40b42, 0x0) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r1 = clone3(&(0x7f0000000400)={0x4800, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x24}, &(0x7f0000000340)=""/14, 0xe, &(0x7f0000000380)=""/35, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xfd3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8, 0x0, 0x0, 0x8, 0xffffffffffffcc20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100001a, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x7, &(0x7f0000000040)=0x1, 0x4) 08:30:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5460, &(0x7f00000001c0)=0x800) 08:30:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 08:30:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 08:30:57 executing program 1: utimensat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0xabc12a54a6320d65) 08:30:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000200)=0x1) 08:30:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 338.932292] syz_tun: entered promiscuous mode [ 338.935008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 338.935951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.936977] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.937935] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 338.938869] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 338.939824] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 338.940811] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 338.941683] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.057587] syz_tun: left promiscuous mode [ 340.851232] Bluetooth: hci0: command 0x0406 tx timeout [ 340.978976] Bluetooth: hci3: command 0x0c1a tx timeout [ 340.979815] Bluetooth: hci6: command 0x0406 tx timeout [ 340.980645] Bluetooth: hci4: command 0x0406 tx timeout [ 340.981440] Bluetooth: hci7: command 0x0406 tx timeout [ 340.982203] Bluetooth: hci5: command 0x0406 tx timeout [ 340.982935] Bluetooth: hci2: command 0x0406 tx timeout [ 340.983721] Bluetooth: hci1: command 0x0406 tx timeout [ 368.708066] watchdog: BUG: soft lockup - CPU#0 stuck for 24s! [syz-executor.5:6277] [ 368.708774] Modules linked in: [ 368.709071] irq event stamp: 2938007 [ 368.709390] hardirqs last enabled at (2938006): [] irqentry_exit+0x3b/0x90 [ 368.710141] hardirqs last disabled at (2938007): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 368.712270] softirqs last enabled at (2911834): [] handle_softirqs+0x50c/0x770 [ 368.714088] softirqs last disabled at (2911849): [] __irq_exit_rcu+0xc4/0x100 [ 368.716175] CPU: 0 UID: 0 PID: 6277 Comm: syz-executor.5 Not tainted 6.13.0-rc1-next-20241203 #1 [ 368.717965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 368.719238] RIP: 0010:memset_orig+0x33/0xb0 [ 368.719630] Code: b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 70 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 368.721099] RSP: 0018:ffff88806ce09228 EFLAGS: 00000206 [ 368.721571] RAX: 0000000000000000 RBX: 0000000000000920 RCX: 0000000000000009 [ 368.722176] RDX: 0000000000000400 RSI: 0000000000000000 RDI: ffff88800ab9d180 [ 368.722777] RBP: ffff88806ce09288 R08: ffff88800ab9d000 R09: 0000000000000000 [ 368.723377] R10: ffff88800ab9d000 R11: 00000000ffffffff R12: ffff888008c41dc0 [ 368.723988] R13: 0000000000000920 R14: 0000000000000398 R15: ffffffff8460f3cc [ 368.724590] FS: 00007f7c0357c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 368.725267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.725770] CR2: 0000001b2ce28000 CR3: 0000000015f28000 CR4: 0000000000350ef0 [ 368.726368] Call Trace: [ 368.726603] [ 368.726814] ? watchdog_timer_fn+0x3ee/0x510 [ 368.727240] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 368.727693] ? __hrtimer_run_queues+0x57c/0xa80 [ 368.728159] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 368.728623] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 368.729121] ? hrtimer_interrupt+0x369/0x830 [ 368.729566] ? __sysvec_apic_timer_interrupt+0xc2/0x330 [ 368.730047] ? sysvec_apic_timer_interrupt+0x34/0x80 [ 368.730520] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.731020] ? ieee802_11_parse_elems_full+0xec/0x15a0 [ 368.731501] ? memset_orig+0x33/0xb0 [ 368.731858] ? srso_return_thunk+0x5/0x5f [ 368.732234] __kmalloc_noprof+0x1b8/0x4b0 [ 368.732615] ? srso_return_thunk+0x5/0x5f [ 368.732992] ? ktime_get+0xc1/0x270 [ 368.733342] ieee802_11_parse_elems_full+0xec/0x15a0 [ 368.733797] ? tick_program_event+0xac/0x140 [ 368.734223] ? srso_return_thunk+0x5/0x5f [ 368.734600] ? hrtimer_interrupt+0x652/0x830 [ 368.735039] ? srso_return_thunk+0x5/0x5f [ 368.735414] ? mark_held_locks+0x9e/0xe0 [ 368.735786] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 368.736286] ? srso_return_thunk+0x5/0x5f [ 368.736658] ? lockdep_hardirqs_on_prepare+0x12b/0x3f0 [ 368.737126] ? srso_return_thunk+0x5/0x5f [ 368.737520] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 368.737994] ieee80211_inform_bss+0xf7/0x10b0 [ 368.738400] ? srso_return_thunk+0x5/0x5f [ 368.738787] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 368.739245] ? lock_acquire+0x32/0xc0 [ 368.739596] ? cfg80211_inform_single_bss_data+0x6c8/0x1c70 [ 368.740130] cfg80211_inform_single_bss_data+0x7fe/0x1c70 [ 368.740635] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 368.741086] ? srso_return_thunk+0x5/0x5f [ 368.741460] ? hlock_class+0x4e/0x130 [ 368.741829] ? srso_return_thunk+0x5/0x5f [ 368.742214] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 368.742791] ? srso_return_thunk+0x5/0x5f [ 368.743166] ? find_held_lock+0x2c/0x110 [ 368.743553] ? clockevents_program_event+0x14f/0x360 [ 368.744032] cfg80211_inform_bss_data+0x20f/0x3510 [ 368.744502] ? srso_return_thunk+0x5/0x5f [ 368.744877] ? srso_return_thunk+0x5/0x5f [ 368.745253] ? hlock_class+0x4e/0x130 [ 368.745619] ? srso_return_thunk+0x5/0x5f [ 368.745992] ? mark_lock+0xac/0xed0 [ 368.746332] ? srso_return_thunk+0x5/0x5f [ 368.746704] ? srso_return_thunk+0x5/0x5f [ 368.747078] ? ktime_get+0x16d/0x270 [ 368.747428] ? __pfx_mark_lock+0x10/0x10 [ 368.747799] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 368.748300] ? clockevents_program_event+0x135/0x360 [ 368.748762] ? srso_return_thunk+0x5/0x5f [ 368.749135] ? tick_program_event+0xac/0x140 [ 368.749557] ? srso_return_thunk+0x5/0x5f [ 368.749936] ? hrtimer_interrupt+0x652/0x830 [ 368.750371] ? srso_return_thunk+0x5/0x5f [ 368.750746] ? mark_held_locks+0x9e/0xe0 [ 368.751148] ? srso_return_thunk+0x5/0x5f [ 368.751526] ? find_held_lock+0x2c/0x110 [ 368.751922] ? ieee80211_bss_info_update+0x2b4/0xa90 [ 368.752376] ? srso_return_thunk+0x5/0x5f [ 368.752750] ? lock_release+0x20f/0x6f0 [ 368.753125] cfg80211_inform_bss_frame_data+0x250/0x6a0 [ 368.753650] ieee80211_bss_info_update+0x2f6/0xa90 [ 368.754105] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 368.754602] ? srso_return_thunk+0x5/0x5f [ 368.754980] ? lockdep_hardirqs_on_prepare+0x12b/0x3f0 [ 368.755450] ? srso_return_thunk+0x5/0x5f [ 368.755824] ? ieee80211_get_channel_khz+0x149/0x1d0 [ 368.756307] ieee80211_scan_rx+0x474/0xac0 [ 368.756693] ? ieee80211_rx_list+0xfdb/0x2840 [ 368.757098] ? ieee80211_rx_list+0xfed/0x2840 [ 368.757509] ieee80211_rx_list+0x1e38/0x2840 [ 368.757929] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 368.758351] ? ieee80211_rx_napi+0x97/0x3b0 [ 368.758763] ? srso_return_thunk+0x5/0x5f [ 368.759137] ? lock_acquire+0x32/0xc0 [ 368.759488] ? ieee80211_rx_napi+0x97/0x3b0 [ 368.759896] ieee80211_rx_napi+0xdc/0x3b0 [ 368.760277] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 368.760720] ieee80211_handle_queued_frames+0xd9/0x130 [ 368.761220] tasklet_action_common+0x235/0x3b0 [ 368.761648] ? workqueue_softirq_action+0x1a/0x170 [ 368.762096] handle_softirqs+0x1b1/0x770 [ 368.762484] __irq_exit_rcu+0xc4/0x100 [ 368.762845] irq_exit_rcu+0x9/0x20 [ 368.763191] sysvec_apic_timer_interrupt+0x70/0x80 [ 368.763651] [ 368.763870] [ 368.764086] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.764575] RIP: 0010:qlist_free_all+0x28/0x160 [ 368.765005] Code: 90 90 48 8b 07 48 85 c0 0f 84 41 01 00 00 41 57 41 56 41 55 49 89 fd 41 54 49 89 f4 55 53 eb 3e 48 63 95 c0 00 00 00 48 8b 18 <48> 89 ef 48 29 d0 48 89 c6 49 89 c6 e8 77 f0 ff ff 49 89 c7 66 90 [ 368.766465] RSP: 0018:ffff88803f547c20 EFLAGS: 00000246 [ 368.766930] RAX: ffff88801aee5800 RBX: ffff88801ac97640 RCX: ffffea00006bb900 [ 368.767533] RDX: 0000000000000000 RSI: ffffea00006bb901 RDI: ffffffff81846dc6 [ 368.768141] RBP: ffff8880096a0500 R08: 0000000000000001 R09: fffffbfff0fde1e9 [ 368.768739] R10: ffffffff87ef0f4f R11: 0000000000000000 R12: 0000000000000000 [ 368.769334] R13: ffff88803f547c58 R14: ffff88800da60500 R15: ffff88800da60500 [ 368.769951] ? put_cpu_partial+0x106/0x1b0 [ 368.770347] kasan_quarantine_reduce+0x19f/0x240 [ 368.770792] __kasan_slab_alloc+0x49/0x70 [ 368.771194] __kmalloc_cache_noprof+0x149/0x3e0 [ 368.771615] ? srso_return_thunk+0x5/0x5f [ 368.772017] find_get_pmu_context+0x86/0x970 [ 368.772420] ? security_capable+0x2f/0x90 [ 368.772829] __do_sys_perf_event_open+0x13f7/0x2b00 [ 368.773286] ? srso_return_thunk+0x5/0x5f [ 368.773660] ? srso_return_thunk+0x5/0x5f [ 368.774038] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 368.774557] do_syscall_64+0xbf/0x1d0 [ 368.774915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.775391] RIP: 0033:0x7f7c06006b19 [ 368.775727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 368.777194] RSP: 002b:00007f7c0357c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 368.777840] RAX: ffffffffffffffda RBX: 00007f7c06119f60 RCX: 00007f7c06006b19 [ 368.778435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 368.779031] RBP: 00007f7c06060f6d R08: 0000000000000000 R09: 0000000000000000 [ 368.779625] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 368.780228] R13: 00007fff202c121f R14: 00007f7c0357c300 R15: 0000000000022000 [ 368.780853] [ 368.781073] Sending NMI from CPU 0 to CPUs 1: [ 368.781490] NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30 08:31:30 executing program 3: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = request_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000100)='\x00', 0xfffffffffffffffd) add_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0), 0x0, r0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:31:30 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x40b42, 0x0) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r1 = clone3(&(0x7f0000000400)={0x4800, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x24}, &(0x7f0000000340)=""/14, 0xe, &(0x7f0000000380)=""/35, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xfd3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8, 0x0, 0x0, 0x8, 0xffffffffffffcc20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100001a, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x7, &(0x7f0000000040)=0x1, 0x4) 08:31:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 08:31:30 executing program 6: r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:31:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 08:31:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000200)=0x1) 08:31:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 08:31:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5460, &(0x7f00000001c0)=0x800) [ 372.072912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 372.080882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.095689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.102243] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 372.106839] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 372.110307] syz_tun: entered promiscuous mode [ 372.112624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 372.122255] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 372.125352] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.193661] syz_tun: left promiscuous mode 08:31:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x369) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 08:31:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 08:31:30 executing program 6: r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 372.375626] loop3: detected capacity change from 0 to 40 [ 372.513589] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 372.514820] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.520661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.527940] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 372.530598] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 372.544701] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 372.545854] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 372.550526] Bluetooth: hci3: Opcode 0x0c1a failed: -4 08:31:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000200)=0x1) 08:31:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)}, 0x0) 08:31:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 08:31:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000240)) 08:31:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000040)) 08:31:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 08:31:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x369) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 372.738675] loop3: detected capacity change from 0 to 40 08:31:31 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)='%', 0x1}], 0x1}}, {{&(0x7f0000000600)=@vsock, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r2, 0x25, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xae51}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}]}]}, 0x50}}, 0x0) bind(r1, &(0x7f00000002c0)=@in6={0xa, 0x4e20, 0xc802, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r5, 0x25, 0x100000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x63c3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}]}]}, 0x50}}, 0x0) 08:31:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 08:31:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigtimedwait(&(0x7f00000001c0)={[0xfffffffffffffffb]}, 0x0, &(0x7f0000000400), 0x8) 08:31:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 08:31:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 08:31:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000200)=0x1) 08:31:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f00000002c0)={@dev, 0x0, 0x0, 0xff}, 0x20) [ 373.042718] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 373.132247] kworker/u10:7: attempt to access beyond end of device [ 373.132247] loop3: rw=1, sector=124, nr_sectors = 4 limit=40 [ 373.134147] Buffer I/O error on dev loop3, logical block 31, lost async page write 08:31:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x369) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 08:31:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 08:31:31 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x292e9) 08:31:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000080)=""/54) [ 373.406808] loop3: detected capacity change from 0 to 40 08:31:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) 08:31:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f00000002c0)={@dev, 0x0, 0x0, 0xff}, 0x20) 08:31:31 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)='%', 0x1}], 0x1}}, {{&(0x7f0000000600)=@vsock, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r2, 0x25, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xae51}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}]}]}, 0x50}}, 0x0) bind(r1, &(0x7f00000002c0)=@in6={0xa, 0x4e20, 0xc802, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r5, 0x25, 0x100000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x63c3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}]}]}, 0x50}}, 0x0) [ 373.701402] kworker/u9:7: attempt to access beyond end of device [ 373.701402] loop3: rw=1, sector=124, nr_sectors = 4 limit=40 [ 373.702485] Buffer I/O error on dev loop3, logical block 31, lost async page write 08:31:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) dup3(r0, r1, 0x0) 08:31:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 08:31:32 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x292e9) 08:31:32 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)='%', 0x1}], 0x1}}, {{&(0x7f0000000600)=@vsock, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r2, 0x25, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xae51}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}]}]}, 0x50}}, 0x0) bind(r1, &(0x7f00000002c0)=@in6={0xa, 0x4e20, 0xc802, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r5, 0x25, 0x100000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x63c3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}]}]}, 0x50}}, 0x0) 08:31:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f00000002c0)={@dev, 0x0, 0x0, 0xff}, 0x20) 08:31:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000080)=""/54) 08:31:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x369) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 08:31:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0xc) [ 373.943673] loop3: detected capacity change from 0 to 40 08:31:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000080)=""/54) [ 374.172044] kworker/u9:2: attempt to access beyond end of device [ 374.172044] loop3: rw=1, sector=124, nr_sectors = 4 limit=40 [ 374.173140] Buffer I/O error on dev loop3, logical block 31, lost async page write 08:31:32 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 08:31:32 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x292e9) 08:31:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f00000002c0)={@dev, 0x0, 0x0, 0xff}, 0x20) 08:31:32 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)='%', 0x1}], 0x1}}, {{&(0x7f0000000600)=@vsock, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r2, 0x25, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xae51}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}]}]}, 0x50}}, 0x0) bind(r1, &(0x7f00000002c0)=@in6={0xa, 0x4e20, 0xc802, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r5, 0x25, 0x100000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x63c3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}]}]}, 0x50}}, 0x0) 08:31:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) dup3(r0, r1, 0x0) 08:31:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 08:31:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000080)=""/54) 08:31:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='selinuxfs\x00', 0x0, 0x0) [ 374.514153] Bluetooth: hci0: command 0x0406 tx timeout [ 374.579277] Bluetooth: hci3: command 0x0c1a tx timeout [ 374.579823] Bluetooth: hci6: command 0x0406 tx timeout [ 374.580341] Bluetooth: hci4: command 0x0406 tx timeout [ 374.580792] Bluetooth: hci7: command 0x0406 tx timeout [ 374.581352] Bluetooth: hci5: command 0x0406 tx timeout [ 374.581822] Bluetooth: hci2: command 0x0406 tx timeout [ 374.582305] Bluetooth: hci1: command 0x0406 tx timeout 08:31:32 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x292e9) 08:31:32 executing program 2: ioperm(0x0, 0x5, 0x36) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 08:31:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc, 0x6, @device_b}]}, 0x28}}, 0x0) [ 374.720950] netlink: 'syz-executor.7': attribute type 11 has an invalid length. 08:31:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) dup3(r0, r1, 0x0) 08:31:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='selinuxfs\x00', 0x0, 0x0) [ 374.770244] netlink: 'syz-executor.7': attribute type 11 has an invalid length. 08:31:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='selinuxfs\x00', 0x0, 0x0) 08:31:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:31:33 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, 0x0, 0x20) 08:31:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414bb00000000006f"], 0x10) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/38, &(0x7f0000000140)=0x26) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e24, @dev}, {0x2, 0x4e20, @local}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x1, 0x0, 0x9, 0x0, 0x0, {0x0, r1}}, 0x3e1) 08:31:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000007f00)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@generic="026b02db13cfb35673"]}, 0x1c}], 0x1}, 0x0) 08:31:34 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x400445a0, &(0x7f0000000040)=""/184) 08:31:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x1a, &(0x7f0000000240), 0x8) 08:31:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='selinuxfs\x00', 0x0, 0x0) 08:31:34 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/70, 0x46, 0x0) 08:31:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) dup3(r0, r1, 0x0) 08:31:34 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 08:31:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0)=0x1, 0x8, 0x0, 0x0, 0x0, 0x0) 08:31:34 executing program 4: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) pidfd_send_signal(r2, 0x0, &(0x7f0000000340)={0x5, 0x0, 0x81}, 0x0) 08:31:34 executing program 6: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000200)) 08:31:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414bb00000000006f"], 0x10) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/38, &(0x7f0000000140)=0x26) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e24, @dev}, {0x2, 0x4e20, @local}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x1, 0x0, 0x9, 0x0, 0x0, {0x0, r1}}, 0x3e1) 08:31:34 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x141142, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x141142, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x0) 08:31:34 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 08:31:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(r0, 0x2) flock(r0, 0x8) [ 376.583179] audit: type=1400 audit(1733301094.885:11): avc: denied { watch_reads } for pid=6478 comm="syz-executor.7" path="/syzkaller-testdir773021598/syzkaller.csBfIv/36" dev="sda" ino=15973 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 08:31:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414bb00000000006f"], 0x10) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/38, &(0x7f0000000140)=0x26) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e24, @dev}, {0x2, 0x4e20, @local}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x1, 0x0, 0x9, 0x0, 0x0, {0x0, r1}}, 0x3e1) 08:31:35 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f00000011c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x24000010) close_range(r0, 0xffffffffffffffff, 0x0) 08:31:35 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) 08:31:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioperm(0x0, 0x5, 0x36) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/pids.max\x00', 0x0, 0x0) fdatasync(r0) 08:31:35 executing program 6: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000200)) 08:31:35 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 08:31:35 executing program 0: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf0ff7f) 08:31:35 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/cgroups\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x1, 0x8, 0x5}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 08:31:35 executing program 6: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000200)) 08:31:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414bb00000000006f"], 0x10) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/38, &(0x7f0000000140)=0x26) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e24, @dev}, {0x2, 0x4e20, @local}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x1, 0x0, 0x9, 0x0, 0x0, {0x0, r1}}, 0x3e1) 08:31:35 executing program 3: r0 = syz_io_uring_setup(0x941, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xb, 0x0, 0x0) 08:31:35 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000100)) 08:31:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) 08:31:35 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 08:31:35 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 08:31:35 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @dev, @random="74fc8c0ab580", @remote}}}}, 0x0) 08:31:35 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 08:31:35 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB='L']}) 08:31:35 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc3c40, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) dup3(r1, r0, 0x0) 08:31:35 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) fchown(r0, 0x0, 0x0) 08:31:35 executing program 6: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000200)) 08:31:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002800)='syscall\x00') close_range(r0, 0xffffffffffffffff, 0x0) 08:31:35 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 08:31:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x89e0, 0x0) 08:31:36 executing program 1: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$tty20(0xc, 0x4, 0x1) 08:31:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e34343631303034383400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000dff4ef821ec34de5a68f275e28ea4831010040000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000901431899014318900000000d7f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d7f4655fd7f4655fd7f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d7f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000d7f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d8f4655fd8f4655fd8f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000014a8ae8200000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d8f4655fd8f4655fd8f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000500000000000000000000000000000000000000000000000000000000000000000000000000000001c98117600000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d8f4655fd8f4655fd8f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3434363130303438342f66696c65302f66696c653000000000000000000000000000000000000000000000125dc13800000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="ed8100000a000000d8f4655fd8f4655fd8f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d38e570b00000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000000002ea040700000000000000000000000000006461746106015400000000000600000000000000786174747231000006014c000000000006000000000000007861747472320000000000000000000078617474723200007861747472310000ed81000028230000d8f4655fd8f4655fd8f4655f00000000000002002000000000000800010000000af301000400000000000000000000000900000060000000000000000000000000000000000000000000000000000000000000000000000000000000a6e5962c00000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00)) 08:31:36 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 08:31:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000039a}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000180)={0x9}, 0x0, 0x0) 08:31:36 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3d, 0x0, &(0x7f0000000080)) 08:31:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0xb01, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 08:31:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000380)) lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0, 0x0) [ 377.961285] loop5: detected capacity change from 0 to 1024 08:31:36 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) [ 378.037283] audit: type=1401 audit(1733301096.363:12): op=setxattr invalid_context="" [ 378.064824] audit: type=1401 audit(1733301096.391:13): op=setxattr invalid_context="" 08:31:36 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3, 0x18, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x0) [ 378.148404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:31:36 executing program 3: io_setup(0xa, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r0, 0x1, &(0x7f0000001200)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 08:31:36 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 378.314604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:31:36 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)='&', 0x1}, {&(0x7f00000000c0)='j', 0x1}], 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 08:31:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454cb, &(0x7f0000000200)) close_range(r0, 0xffffffffffffffff, 0x0) 08:31:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)) 08:31:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e34343631303034383400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000dff4ef821ec34de5a68f275e28ea4831010040000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000901431899014318900000000d7f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d7f4655fd7f4655fd7f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d7f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000d7f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d8f4655fd8f4655fd8f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000014a8ae8200000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d8f4655fd8f4655fd8f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000500000000000000000000000000000000000000000000000000000000000000000000000000000001c98117600000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d8f4655fd8f4655fd8f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3434363130303438342f66696c65302f66696c653000000000000000000000000000000000000000000000125dc13800000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="ed81000064000000d8f4655fd8f4655fd8f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616ca48ba4e600000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00)) 08:31:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0xb01, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 08:31:36 executing program 6: setresuid(0x0, 0xee01, 0xee00) setfsuid(0xee00) 08:31:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/124, 0x7c) 08:31:36 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3, 0x18, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x0) [ 378.520542] loop5: detected capacity change from 0 to 1024 [ 378.583258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:31:36 executing program 6: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 08:31:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) [ 378.690902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:31:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e34343631303034383400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000dff4ef821ec34de5a68f275e28ea4831010040000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000901431899014318900000000d7f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d7f4655fd7f4655fd7f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d7f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000d7f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d8f4655fd8f4655fd8f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000014a8ae8200000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d8f4655fd8f4655fd8f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000500000000000000000000000000000000000000000000000000000000000000000000000000000001c98117600000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d8f4655fd8f4655fd8f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3434363130303438342f66696c65302f66696c653000000000000000000000000000000000000000000000125dc13800000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00)) 08:31:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0xb01, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 08:31:37 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) VM DIAGNOSIS: 08:31:27 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8263f2a0 RDI=ffffffff8867d840 RBP=ffffffff8867d800 RSP=ffff88806ce08a18 R8 =0000000000000000 R9 =ffffed100175b046 R10=0000000000000010 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff10cfb5a R15=dffffc0000000000 RIP=ffffffff8263f2f5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7c0357c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2ce28000 CR3=0000000015f28000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7c060ed7c000007f7c060ed7c8 XMM02=00007f7c060ed7e000007f7c060ed7c0 XMM03=00007f7c060ed7c800007f7c060ed7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000001c3119 RBX=0000000000000001 RCX=ffffffff8484b837 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812b16da RBP=dffffc0000000000 RSP=ffff8880096cfe68 R8 =0000000000000001 R9 =ffffed100d9e6cba R10=ffff88806cf365d3 R11=0000000000000000 R12=ffffffff863fac90 R13=1ffff110012d9fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8484c7de RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c000297000 CR3=0000000015b16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000070000000000000007 XMM02=0000000000000000415d521600000000 XMM03=202c3078307b3d293034313030303030 XMM04=615f6c6e2474656b636f73203d203072 XMM05=65730a29307830202c307830202c3078 XMM06=524553555f54494455412467736d646e XMM07=30663778302826202c3072284356415f XMM08=2c3078307b3d29303431303030303030 XMM09=30303030663778302826202c30783020 XMM10=306637783028267b3d29303031303030 XMM11=303178307b3d29303830303030303030 XMM12=0a29307830202c7d7d30317830202c7d XMM13=2c7d307830202c307830202c3078307b XMM14=202c307830202c307830202c30783020 XMM15=0a297d307830202c307830202c347830