Warning: Permanently added '[localhost]:24968' (ECDSA) to the list of known hosts. 2025/11/27 08:39:53 fuzzer started 2025/11/27 08:39:53 dialing manager at localhost:36809 syzkaller login: [ 58.617716] cgroup: Unknown subsys name 'net' [ 58.683925] cgroup: Unknown subsys name 'cpuset' [ 58.697780] cgroup: Unknown subsys name 'rlimit' 2025/11/27 08:40:03 syscalls: 2214 2025/11/27 08:40:03 code coverage: enabled 2025/11/27 08:40:03 comparison tracing: enabled 2025/11/27 08:40:03 extra coverage: enabled 2025/11/27 08:40:03 setuid sandbox: enabled 2025/11/27 08:40:03 namespace sandbox: enabled 2025/11/27 08:40:03 Android sandbox: enabled 2025/11/27 08:40:03 fault injection: enabled 2025/11/27 08:40:03 leak checking: enabled 2025/11/27 08:40:03 net packet injection: enabled 2025/11/27 08:40:03 net device setup: enabled 2025/11/27 08:40:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/27 08:40:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/27 08:40:03 USB emulation: enabled 2025/11/27 08:40:03 hci packet injection: enabled 2025/11/27 08:40:03 wifi device emulation: enabled 2025/11/27 08:40:03 802.15.4 emulation: enabled 2025/11/27 08:40:03 fetching corpus: 0, signal 0/2000 (executing program) 2025/11/27 08:40:03 fetching corpus: 50, signal 14177/17904 (executing program) 2025/11/27 08:40:03 fetching corpus: 100, signal 30098/35295 (executing program) 2025/11/27 08:40:03 fetching corpus: 150, signal 36186/42907 (executing program) 2025/11/27 08:40:03 fetching corpus: 200, signal 45390/53379 (executing program) 2025/11/27 08:40:04 fetching corpus: 250, signal 51504/60747 (executing program) 2025/11/27 08:40:04 fetching corpus: 300, signal 58235/68644 (executing program) 2025/11/27 08:40:04 fetching corpus: 350, signal 60554/72259 (executing program) 2025/11/27 08:40:04 fetching corpus: 400, signal 64541/77418 (executing program) 2025/11/27 08:40:04 fetching corpus: 450, signal 68069/82046 (executing program) 2025/11/27 08:40:04 fetching corpus: 500, signal 72296/87228 (executing program) 2025/11/27 08:40:04 fetching corpus: 550, signal 75686/91675 (executing program) 2025/11/27 08:40:04 fetching corpus: 600, signal 79462/96330 (executing program) 2025/11/27 08:40:04 fetching corpus: 650, signal 82424/100221 (executing program) 2025/11/27 08:40:05 fetching corpus: 700, signal 87049/105450 (executing program) 2025/11/27 08:40:05 fetching corpus: 750, signal 89387/108701 (executing program) 2025/11/27 08:40:05 fetching corpus: 800, signal 91571/111777 (executing program) 2025/11/27 08:40:05 fetching corpus: 850, signal 93219/114382 (executing program) 2025/11/27 08:40:05 fetching corpus: 900, signal 95267/117263 (executing program) 2025/11/27 08:40:05 fetching corpus: 950, signal 96762/119659 (executing program) 2025/11/27 08:40:05 fetching corpus: 1000, signal 97847/121676 (executing program) 2025/11/27 08:40:05 fetching corpus: 1050, signal 99738/124287 (executing program) 2025/11/27 08:40:05 fetching corpus: 1100, signal 103415/128279 (executing program) 2025/11/27 08:40:06 fetching corpus: 1150, signal 106548/131814 (executing program) 2025/11/27 08:40:06 fetching corpus: 1200, signal 108236/134166 (executing program) 2025/11/27 08:40:06 fetching corpus: 1250, signal 109370/136071 (executing program) 2025/11/27 08:40:06 fetching corpus: 1300, signal 110643/138045 (executing program) 2025/11/27 08:40:06 fetching corpus: 1350, signal 111307/139545 (executing program) 2025/11/27 08:40:06 fetching corpus: 1400, signal 112777/141663 (executing program) 2025/11/27 08:40:06 fetching corpus: 1450, signal 114200/143710 (executing program) 2025/11/27 08:40:06 fetching corpus: 1500, signal 115186/145391 (executing program) 2025/11/27 08:40:06 fetching corpus: 1550, signal 116222/147103 (executing program) 2025/11/27 08:40:07 fetching corpus: 1600, signal 118053/149376 (executing program) 2025/11/27 08:40:07 fetching corpus: 1650, signal 119871/151663 (executing program) 2025/11/27 08:40:07 fetching corpus: 1700, signal 121208/153538 (executing program) 2025/11/27 08:40:07 fetching corpus: 1750, signal 122547/155358 (executing program) 2025/11/27 08:40:07 fetching corpus: 1800, signal 123470/156895 (executing program) 2025/11/27 08:40:07 fetching corpus: 1850, signal 125025/158821 (executing program) 2025/11/27 08:40:07 fetching corpus: 1900, signal 126255/160546 (executing program) 2025/11/27 08:40:07 fetching corpus: 1950, signal 127511/162238 (executing program) 2025/11/27 08:40:07 fetching corpus: 2000, signal 128504/163695 (executing program) 2025/11/27 08:40:07 fetching corpus: 2050, signal 129868/165443 (executing program) 2025/11/27 08:40:08 fetching corpus: 2100, signal 131072/167031 (executing program) 2025/11/27 08:40:08 fetching corpus: 2150, signal 131973/168481 (executing program) 2025/11/27 08:40:08 fetching corpus: 2200, signal 132759/169862 (executing program) 2025/11/27 08:40:08 fetching corpus: 2250, signal 134048/171447 (executing program) 2025/11/27 08:40:08 fetching corpus: 2300, signal 134701/172600 (executing program) 2025/11/27 08:40:08 fetching corpus: 2350, signal 135615/173989 (executing program) 2025/11/27 08:40:08 fetching corpus: 2400, signal 136547/175314 (executing program) 2025/11/27 08:40:08 fetching corpus: 2450, signal 137170/176444 (executing program) 2025/11/27 08:40:08 fetching corpus: 2500, signal 138275/177837 (executing program) 2025/11/27 08:40:08 fetching corpus: 2550, signal 139032/179010 (executing program) 2025/11/27 08:40:08 fetching corpus: 2600, signal 140311/180453 (executing program) 2025/11/27 08:40:09 fetching corpus: 2650, signal 141281/181766 (executing program) 2025/11/27 08:40:09 fetching corpus: 2700, signal 142022/182904 (executing program) 2025/11/27 08:40:09 fetching corpus: 2750, signal 142834/184051 (executing program) 2025/11/27 08:40:09 fetching corpus: 2800, signal 143564/185124 (executing program) 2025/11/27 08:40:09 fetching corpus: 2850, signal 144546/186335 (executing program) 2025/11/27 08:40:09 fetching corpus: 2900, signal 146591/188071 (executing program) 2025/11/27 08:40:09 fetching corpus: 2950, signal 147401/189164 (executing program) 2025/11/27 08:40:09 fetching corpus: 3000, signal 149249/190753 (executing program) 2025/11/27 08:40:09 fetching corpus: 3050, signal 149936/191704 (executing program) 2025/11/27 08:40:10 fetching corpus: 3100, signal 150725/192712 (executing program) 2025/11/27 08:40:10 fetching corpus: 3150, signal 151950/193957 (executing program) 2025/11/27 08:40:10 fetching corpus: 3200, signal 152694/194913 (executing program) 2025/11/27 08:40:10 fetching corpus: 3250, signal 153542/195933 (executing program) 2025/11/27 08:40:10 fetching corpus: 3300, signal 154084/196795 (executing program) 2025/11/27 08:40:10 fetching corpus: 3350, signal 155725/198080 (executing program) 2025/11/27 08:40:10 fetching corpus: 3400, signal 156193/198894 (executing program) 2025/11/27 08:40:10 fetching corpus: 3450, signal 156692/199719 (executing program) 2025/11/27 08:40:10 fetching corpus: 3500, signal 157220/200523 (executing program) 2025/11/27 08:40:10 fetching corpus: 3550, signal 157903/201360 (executing program) 2025/11/27 08:40:10 fetching corpus: 3600, signal 158454/202229 (executing program) 2025/11/27 08:40:11 fetching corpus: 3650, signal 158881/202985 (executing program) 2025/11/27 08:40:11 fetching corpus: 3700, signal 159206/203690 (executing program) 2025/11/27 08:40:11 fetching corpus: 3750, signal 159752/204465 (executing program) 2025/11/27 08:40:11 fetching corpus: 3800, signal 160526/205302 (executing program) 2025/11/27 08:40:11 fetching corpus: 3850, signal 161004/206069 (executing program) 2025/11/27 08:40:11 fetching corpus: 3900, signal 161586/206846 (executing program) 2025/11/27 08:40:11 fetching corpus: 3950, signal 162041/207539 (executing program) 2025/11/27 08:40:11 fetching corpus: 4000, signal 162807/208298 (executing program) 2025/11/27 08:40:11 fetching corpus: 4050, signal 163340/209026 (executing program) 2025/11/27 08:40:11 fetching corpus: 4100, signal 163926/209741 (executing program) 2025/11/27 08:40:11 fetching corpus: 4150, signal 164777/210517 (executing program) 2025/11/27 08:40:12 fetching corpus: 4200, signal 165591/211247 (executing program) 2025/11/27 08:40:12 fetching corpus: 4250, signal 166014/211866 (executing program) 2025/11/27 08:40:12 fetching corpus: 4300, signal 166485/212478 (executing program) 2025/11/27 08:40:12 fetching corpus: 4350, signal 167056/213138 (executing program) 2025/11/27 08:40:12 fetching corpus: 4400, signal 167550/213735 (executing program) 2025/11/27 08:40:12 fetching corpus: 4450, signal 167971/214334 (executing program) 2025/11/27 08:40:12 fetching corpus: 4500, signal 168422/214964 (executing program) 2025/11/27 08:40:12 fetching corpus: 4550, signal 169120/215619 (executing program) 2025/11/27 08:40:12 fetching corpus: 4600, signal 169585/216226 (executing program) 2025/11/27 08:40:12 fetching corpus: 4650, signal 169920/216771 (executing program) 2025/11/27 08:40:12 fetching corpus: 4700, signal 170345/217353 (executing program) 2025/11/27 08:40:13 fetching corpus: 4750, signal 170993/217940 (executing program) 2025/11/27 08:40:13 fetching corpus: 4800, signal 171553/218504 (executing program) 2025/11/27 08:40:13 fetching corpus: 4850, signal 172304/219083 (executing program) 2025/11/27 08:40:13 fetching corpus: 4900, signal 172771/219618 (executing program) 2025/11/27 08:40:13 fetching corpus: 4950, signal 173267/220150 (executing program) 2025/11/27 08:40:13 fetching corpus: 5000, signal 173699/220690 (executing program) 2025/11/27 08:40:13 fetching corpus: 5050, signal 174110/221189 (executing program) 2025/11/27 08:40:13 fetching corpus: 5100, signal 174512/221702 (executing program) 2025/11/27 08:40:13 fetching corpus: 5150, signal 175039/222186 (executing program) 2025/11/27 08:40:14 fetching corpus: 5200, signal 175411/222699 (executing program) 2025/11/27 08:40:14 fetching corpus: 5250, signal 175673/223156 (executing program) 2025/11/27 08:40:14 fetching corpus: 5300, signal 176156/223616 (executing program) 2025/11/27 08:40:14 fetching corpus: 5350, signal 176659/224096 (executing program) 2025/11/27 08:40:14 fetching corpus: 5400, signal 177027/224519 (executing program) 2025/11/27 08:40:14 fetching corpus: 5450, signal 177650/224973 (executing program) 2025/11/27 08:40:14 fetching corpus: 5500, signal 178161/225412 (executing program) 2025/11/27 08:40:14 fetching corpus: 5550, signal 178506/225818 (executing program) 2025/11/27 08:40:14 fetching corpus: 5600, signal 178862/226279 (executing program) 2025/11/27 08:40:14 fetching corpus: 5650, signal 179411/226356 (executing program) 2025/11/27 08:40:14 fetching corpus: 5700, signal 179918/226356 (executing program) 2025/11/27 08:40:15 fetching corpus: 5750, signal 180260/226356 (executing program) 2025/11/27 08:40:15 fetching corpus: 5800, signal 180612/226356 (executing program) 2025/11/27 08:40:15 fetching corpus: 5850, signal 181371/226356 (executing program) 2025/11/27 08:40:15 fetching corpus: 5900, signal 181646/226356 (executing program) 2025/11/27 08:40:15 fetching corpus: 5950, signal 182203/226357 (executing program) 2025/11/27 08:40:15 fetching corpus: 6000, signal 182747/226357 (executing program) 2025/11/27 08:40:15 fetching corpus: 6050, signal 183258/226357 (executing program) 2025/11/27 08:40:15 fetching corpus: 6100, signal 183763/226357 (executing program) 2025/11/27 08:40:15 fetching corpus: 6150, signal 184068/226357 (executing program) 2025/11/27 08:40:15 fetching corpus: 6200, signal 184505/226357 (executing program) 2025/11/27 08:40:16 fetching corpus: 6250, signal 184823/226357 (executing program) 2025/11/27 08:40:16 fetching corpus: 6300, signal 185233/226357 (executing program) 2025/11/27 08:40:16 fetching corpus: 6350, signal 185653/226357 (executing program) 2025/11/27 08:40:16 fetching corpus: 6400, signal 186195/226357 (executing program) 2025/11/27 08:40:16 fetching corpus: 6450, signal 186528/226357 (executing program) 2025/11/27 08:40:16 fetching corpus: 6500, signal 186977/226357 (executing program) 2025/11/27 08:40:16 fetching corpus: 6550, signal 187566/226357 (executing program) 2025/11/27 08:40:16 fetching corpus: 6600, signal 187919/226357 (executing program) 2025/11/27 08:40:16 fetching corpus: 6650, signal 188138/226357 (executing program) 2025/11/27 08:40:16 fetching corpus: 6700, signal 188403/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 6750, signal 188670/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 6800, signal 188981/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 6850, signal 189306/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 6900, signal 189567/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 6950, signal 189916/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 7000, signal 190346/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 7050, signal 190653/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 7100, signal 191023/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 7150, signal 191418/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 7200, signal 191759/226357 (executing program) 2025/11/27 08:40:17 fetching corpus: 7250, signal 191971/226357 (executing program) 2025/11/27 08:40:18 fetching corpus: 7300, signal 192337/226357 (executing program) 2025/11/27 08:40:18 fetching corpus: 7350, signal 192670/226357 (executing program) 2025/11/27 08:40:18 fetching corpus: 7400, signal 193023/226357 (executing program) 2025/11/27 08:40:18 fetching corpus: 7450, signal 193457/226357 (executing program) 2025/11/27 08:40:18 fetching corpus: 7500, signal 193799/226357 (executing program) 2025/11/27 08:40:18 fetching corpus: 7550, signal 194162/226365 (executing program) 2025/11/27 08:40:18 fetching corpus: 7600, signal 194439/226365 (executing program) 2025/11/27 08:40:18 fetching corpus: 7650, signal 194934/226365 (executing program) 2025/11/27 08:40:18 fetching corpus: 7700, signal 195304/226365 (executing program) 2025/11/27 08:40:18 fetching corpus: 7750, signal 195662/226365 (executing program) 2025/11/27 08:40:18 fetching corpus: 7800, signal 195959/226365 (executing program) 2025/11/27 08:40:19 fetching corpus: 7850, signal 196224/226365 (executing program) 2025/11/27 08:40:19 fetching corpus: 7900, signal 196580/226365 (executing program) 2025/11/27 08:40:19 fetching corpus: 7950, signal 196861/226365 (executing program) 2025/11/27 08:40:19 fetching corpus: 8000, signal 197233/226365 (executing program) 2025/11/27 08:40:19 fetching corpus: 8050, signal 197635/226365 (executing program) 2025/11/27 08:40:19 fetching corpus: 8100, signal 197936/226365 (executing program) 2025/11/27 08:40:19 fetching corpus: 8150, signal 198186/226365 (executing program) 2025/11/27 08:40:19 fetching corpus: 8200, signal 198457/226365 (executing program) 2025/11/27 08:40:19 fetching corpus: 8250, signal 198744/226365 (executing program) 2025/11/27 08:40:19 fetching corpus: 8300, signal 199023/226365 (executing program) 2025/11/27 08:40:20 fetching corpus: 8350, signal 199467/226365 (executing program) 2025/11/27 08:40:20 fetching corpus: 8400, signal 199816/226365 (executing program) 2025/11/27 08:40:20 fetching corpus: 8450, signal 200106/226365 (executing program) 2025/11/27 08:40:20 fetching corpus: 8500, signal 200273/226365 (executing program) 2025/11/27 08:40:20 fetching corpus: 8550, signal 200500/226365 (executing program) 2025/11/27 08:40:20 fetching corpus: 8600, signal 200809/226365 (executing program) 2025/11/27 08:40:20 fetching corpus: 8650, signal 201205/226365 (executing program) 2025/11/27 08:40:20 fetching corpus: 8700, signal 201410/226365 (executing program) 2025/11/27 08:40:20 fetching corpus: 8750, signal 201774/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 8800, signal 202051/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 8850, signal 202278/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 8900, signal 202638/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 8950, signal 202833/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 9000, signal 203212/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 9050, signal 203488/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 9100, signal 203753/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 9150, signal 204006/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 9200, signal 204746/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 9250, signal 205012/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 9300, signal 205492/226365 (executing program) 2025/11/27 08:40:21 fetching corpus: 9350, signal 205816/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9400, signal 206046/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9450, signal 206360/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9500, signal 206546/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9550, signal 206808/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9600, signal 207029/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9650, signal 207315/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9700, signal 207532/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9750, signal 207827/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9800, signal 208052/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9850, signal 208275/226365 (executing program) 2025/11/27 08:40:22 fetching corpus: 9900, signal 208547/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 9950, signal 208778/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10000, signal 209017/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10050, signal 209251/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10100, signal 209492/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10150, signal 209772/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10200, signal 209953/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10250, signal 210156/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10300, signal 210430/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10350, signal 210655/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10400, signal 210914/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10450, signal 211190/226365 (executing program) 2025/11/27 08:40:23 fetching corpus: 10500, signal 211394/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 10550, signal 211589/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 10600, signal 211798/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 10650, signal 212042/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 10700, signal 212359/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 10750, signal 212623/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 10800, signal 212834/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 10850, signal 213020/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 10900, signal 213267/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 10950, signal 213524/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 11000, signal 213763/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 11050, signal 213934/226365 (executing program) 2025/11/27 08:40:24 fetching corpus: 11100, signal 214138/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11150, signal 214387/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11200, signal 214541/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11250, signal 214811/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11300, signal 215011/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11350, signal 215286/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11400, signal 215511/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11450, signal 215762/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11500, signal 216034/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11550, signal 216307/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11600, signal 216573/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11650, signal 216840/226365 (executing program) 2025/11/27 08:40:25 fetching corpus: 11700, signal 217129/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 11750, signal 217347/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 11800, signal 217532/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 11850, signal 217717/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 11900, signal 217901/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 11950, signal 218132/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 12000, signal 218345/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 12050, signal 218500/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 12100, signal 218724/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 12150, signal 218878/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 12200, signal 219022/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 12250, signal 219200/226365 (executing program) 2025/11/27 08:40:26 fetching corpus: 12300, signal 219393/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12350, signal 219583/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12400, signal 219732/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12450, signal 219954/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12500, signal 220132/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12550, signal 220373/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12600, signal 220558/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12650, signal 220739/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12700, signal 220914/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12750, signal 221111/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12800, signal 221291/226365 (executing program) 2025/11/27 08:40:27 fetching corpus: 12850, signal 221468/226365 (executing program) 2025/11/27 08:40:28 fetching corpus: 12900, signal 221665/226365 (executing program) 2025/11/27 08:40:28 fetching corpus: 12950, signal 221859/226365 (executing program) 2025/11/27 08:40:28 fetching corpus: 13000, signal 222019/226365 (executing program) 2025/11/27 08:40:28 fetching corpus: 13050, signal 222219/226365 (executing program) 2025/11/27 08:40:28 fetching corpus: 13100, signal 222391/226365 (executing program) 2025/11/27 08:40:28 fetching corpus: 13150, signal 222592/226368 (executing program) 2025/11/27 08:40:28 fetching corpus: 13200, signal 222727/226368 (executing program) 2025/11/27 08:40:28 fetching corpus: 13250, signal 222926/226368 (executing program) 2025/11/27 08:40:28 fetching corpus: 13300, signal 223081/226368 (executing program) 2025/11/27 08:40:28 fetching corpus: 13350, signal 223280/226368 (executing program) 2025/11/27 08:40:28 fetching corpus: 13400, signal 223508/226368 (executing program) 2025/11/27 08:40:29 fetching corpus: 13450, signal 223746/226368 (executing program) 2025/11/27 08:40:29 fetching corpus: 13500, signal 223951/226368 (executing program) 2025/11/27 08:40:29 fetching corpus: 13550, signal 224159/226368 (executing program) 2025/11/27 08:40:29 fetching corpus: 13581, signal 224323/226368 (executing program) 2025/11/27 08:40:29 fetching corpus: 13581, signal 224323/226368 (executing program) 2025/11/27 08:40:31 starting 8 fuzzer processes 08:40:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010071039fd8000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) fcntl$addseals(r1, 0x409, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0xfffd, @empty}, {0x6, @random}, 0xe, {0x2, 0x0, @private=0xa010102}, 'veth1_to_bond\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x1, @remote}, 0x64, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'tunl0\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000002b40)={{0x2, 0x4e22, @empty}, {0x1, @local}, 0x10, {0x2, 0x4e23, @private=0xa010101}}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/191, 0xbf}, {&(0x7f0000000500)=""/186, 0xba}], 0x7, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000002700), 0x6e, &(0x7f0000002940)=[{&(0x7f0000002780)=""/255, 0xff}, {&(0x7f0000002880)=""/169, 0xa9}], 0x2, &(0x7f0000002980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}], 0x2, 0x40, 0x0) connect$inet6(r3, &(0x7f0000002b00)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004640)=[{{&(0x7f0000000640)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x890) getsockname(r2, &(0x7f0000000140)=@llc, &(0x7f00000001c0)=0x80) 08:40:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xfff, 0x0, 0x9, 0x9}) 08:40:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc000, 0x0, 0x0, 0x0) 08:40:31 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) 08:40:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 08:40:31 executing program 7: io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x191e, &(0x7f00000006c0)={0x0, 0xb93f, 0x8}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 96.477201] audit: type=1400 audit(1764232831.750:7): avc: denied { execmem } for pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:40:31 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) 08:40:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 97.668418] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.671355] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.673576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.677294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.680062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.700427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.703327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.705309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.709503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.711981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.795277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.797658] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.799323] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.809635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.815020] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.816502] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.821597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.847049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.854999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.859484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.882365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.902176] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.912556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.917261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.920463] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.922240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.923866] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.925128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.928842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.931119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.935547] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.936127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.942235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.943586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.956494] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.959041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.970556] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.982057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.013614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.018383] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.754472] Bluetooth: hci0: command tx timeout [ 99.754478] Bluetooth: hci1: command tx timeout [ 99.882195] Bluetooth: hci3: command tx timeout [ 99.945864] Bluetooth: hci2: command tx timeout [ 100.009866] Bluetooth: hci7: command tx timeout [ 100.011076] Bluetooth: hci5: command tx timeout [ 100.011110] Bluetooth: hci4: command tx timeout [ 100.073843] Bluetooth: hci6: command tx timeout [ 101.801851] Bluetooth: hci1: command tx timeout [ 101.801883] Bluetooth: hci0: command tx timeout [ 101.929921] Bluetooth: hci3: command tx timeout [ 101.995814] Bluetooth: hci2: command tx timeout [ 102.059815] Bluetooth: hci5: command tx timeout [ 102.059938] Bluetooth: hci7: command tx timeout [ 102.060245] Bluetooth: hci4: command tx timeout [ 102.122836] Bluetooth: hci6: command tx timeout [ 103.849912] Bluetooth: hci1: command tx timeout [ 103.849972] Bluetooth: hci0: command tx timeout [ 103.977841] Bluetooth: hci3: command tx timeout [ 104.041941] Bluetooth: hci2: command tx timeout [ 104.105874] Bluetooth: hci4: command tx timeout [ 104.105893] Bluetooth: hci7: command tx timeout [ 104.105920] Bluetooth: hci5: command tx timeout [ 104.169826] Bluetooth: hci6: command tx timeout [ 105.897938] Bluetooth: hci1: command tx timeout [ 105.898001] Bluetooth: hci0: command tx timeout [ 106.025982] Bluetooth: hci3: command tx timeout [ 106.089901] Bluetooth: hci2: command tx timeout [ 106.154901] Bluetooth: hci4: command tx timeout [ 106.154942] Bluetooth: hci5: command tx timeout [ 106.155460] Bluetooth: hci7: command tx timeout [ 106.217912] Bluetooth: hci6: command tx timeout [ 135.254612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.255288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.451350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.452026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.669518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.670142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.770132] audit: type=1400 audit(1764232871.046:8): avc: denied { open } for pid=3751 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.774219] audit: type=1400 audit(1764232871.046:9): avc: denied { kernel } for pid=3751 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.805219] audit: type=1400 audit(1764232871.082:10): avc: denied { write } for pid=3751 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.816596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.817213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:41:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 135.929871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.930476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.995327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.996071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:41:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 08:41:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 08:41:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 08:41:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 136.446885] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 08:41:11 executing program 3: sched_setparam(0x0, &(0x7f0000000000)=0x101) [ 136.625647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.626292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.704151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.704840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.934741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.935384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.998709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.999348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.187530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.188481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.225448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.226167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.341154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.341839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.380346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.381195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.418095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.418708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.452496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.453115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:41:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x24}}, 0x0) 08:41:12 executing program 7: syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='usefree,uid=', @ANYRESHEX, @ANYBLOB='7']) 08:41:12 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) 08:41:12 executing program 6: r0 = fork() getpriority(0x0, r0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000080)='map_files\x00') r2 = fork() kcmp(0x0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) kcmp(r0, r2, 0x3, r1, r1) fspick(r1, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0xc0f85403, &(0x7f0000000040)={{0x1}}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000000)={r5, r1, 0x1}) 08:41:12 executing program 1: clock_settime(0xfffffffffffffffe, &(0x7f0000000000)={0x0, 0x3938700}) 08:41:12 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 08:41:12 executing program 3: io_setup(0x2, &(0x7f0000000080)=0x0) r1 = inotify_init1(0x0) io_submit(r0, 0x1, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 08:41:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010071039fd8000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) fcntl$addseals(r1, 0x409, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0xfffd, @empty}, {0x6, @random}, 0xe, {0x2, 0x0, @private=0xa010102}, 'veth1_to_bond\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x1, @remote}, 0x64, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'tunl0\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000002b40)={{0x2, 0x4e22, @empty}, {0x1, @local}, 0x10, {0x2, 0x4e23, @private=0xa010101}}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/191, 0xbf}, {&(0x7f0000000500)=""/186, 0xba}], 0x7, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000002700), 0x6e, &(0x7f0000002940)=[{&(0x7f0000002780)=""/255, 0xff}, {&(0x7f0000002880)=""/169, 0xa9}], 0x2, &(0x7f0000002980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}], 0x2, 0x40, 0x0) connect$inet6(r3, &(0x7f0000002b00)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004640)=[{{&(0x7f0000000640)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x890) getsockname(r2, &(0x7f0000000140)=@llc, &(0x7f00000001c0)=0x80) [ 137.646673] msdos: Bad value for 'uid' [ 137.647111] msdos: Bad value for 'uid' [ 137.652802] msdos: Bad value for 'uid' [ 137.653146] msdos: Bad value for 'uid' 08:41:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010071039fd8000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) fcntl$addseals(r1, 0x409, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0xfffd, @empty}, {0x6, @random}, 0xe, {0x2, 0x0, @private=0xa010102}, 'veth1_to_bond\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x1, @remote}, 0x64, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'tunl0\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000002b40)={{0x2, 0x4e22, @empty}, {0x1, @local}, 0x10, {0x2, 0x4e23, @private=0xa010101}}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/191, 0xbf}, {&(0x7f0000000500)=""/186, 0xba}], 0x7, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000002700), 0x6e, &(0x7f0000002940)=[{&(0x7f0000002780)=""/255, 0xff}, {&(0x7f0000002880)=""/169, 0xa9}], 0x2, &(0x7f0000002980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}], 0x2, 0x40, 0x0) connect$inet6(r3, &(0x7f0000002b00)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004640)=[{{&(0x7f0000000640)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x890) getsockname(r2, &(0x7f0000000140)=@llc, &(0x7f00000001c0)=0x80) 08:41:12 executing program 3: clock_gettime(0x0, &(0x7f0000002080)) 08:41:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0) 08:41:12 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) 08:41:12 executing program 5: ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000800)="10", 0x1}], 0x1) 08:41:13 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) 08:41:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x7fffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x0, 0x0) 08:41:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010071039fd8000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) fcntl$addseals(r1, 0x409, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0xfffd, @empty}, {0x6, @random}, 0xe, {0x2, 0x0, @private=0xa010102}, 'veth1_to_bond\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x1, @remote}, 0x64, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'tunl0\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000002b40)={{0x2, 0x4e22, @empty}, {0x1, @local}, 0x10, {0x2, 0x4e23, @private=0xa010101}}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/191, 0xbf}, {&(0x7f0000000500)=""/186, 0xba}], 0x7, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000002700), 0x6e, &(0x7f0000002940)=[{&(0x7f0000002780)=""/255, 0xff}, {&(0x7f0000002880)=""/169, 0xa9}], 0x2, &(0x7f0000002980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}], 0x2, 0x40, 0x0) connect$inet6(r3, &(0x7f0000002b00)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004640)=[{{&(0x7f0000000640)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x890) getsockname(r2, &(0x7f0000000140)=@llc, &(0x7f00000001c0)=0x80) 08:41:13 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_io_uring_setup(0x1722, &(0x7f0000000080)={0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 08:41:13 executing program 5: process_vm_writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)=""/55, 0x37}], 0x1, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 08:41:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:41:13 executing program 7: syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x4002, '\x00\x00\x00\x00\x00\x00\b\x00'}}}}}}, 0x0) 08:41:13 executing program 6: r0 = fork() getpriority(0x0, r0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000080)='map_files\x00') r2 = fork() kcmp(0x0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) kcmp(r0, r2, 0x3, r1, r1) fspick(r1, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0xc0f85403, &(0x7f0000000040)={{0x1}}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000000)={r5, r1, 0x1}) [ 137.850755] audit: type=1400 audit(1764232873.126:11): avc: denied { tracepoint } for pid=3951 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.853026] sit: Src spoofed 0.0.0.0/2002:0:240::800 -> 0.0.0.0/:: [ 137.855582] sit: Src spoofed 0.0.0.0/2002:0:240::800 -> 0.0.0.0/:: 08:41:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_delete(0x0) 08:41:13 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) 08:41:13 executing program 2: keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) 08:41:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x30}}, 0x0) 08:41:13 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) 08:41:13 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x0) preadv2(r1, &(0x7f0000001d80)=[{&(0x7f0000000100)=""/217, 0x4fc622cd219498b5}], 0x1, 0x0, 0x0, 0x0) 08:41:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x50, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:41:13 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 08:41:13 executing program 0: r0 = syz_io_uring_setup(0xa5, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 138.064738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.073113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.581502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.582422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:41:14 executing program 6: r0 = fork() getpriority(0x0, r0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000080)='map_files\x00') r2 = fork() kcmp(0x0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) kcmp(r0, r2, 0x3, r1, r1) fspick(r1, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0xc0f85403, &(0x7f0000000040)={{0x1}}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000000)={r5, r1, 0x1}) 08:41:14 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x60181, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) 08:41:14 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) shutdown(r0, 0x1) 08:41:14 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 08:41:14 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:41:14 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_mrelease(0xffffffffffffffff, 0x0) 08:41:14 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x0) preadv2(r1, &(0x7f0000001d80)=[{&(0x7f0000000100)=""/217, 0x4fc622cd219498b5}], 0x1, 0x0, 0x0, 0x0) 08:41:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:41:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:41:14 executing program 4: setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4b, &(0x7f0000000000)={@dev}, 0x14) 08:41:14 executing program 0: sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x810, 0x0, 0x0) 08:41:14 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x414d02) close_range(r0, 0xffffffffffffffff, 0x0) 08:41:14 executing program 4: r0 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(0x0, r0) write$P9_RLOCK(r0, &(0x7f00000002c0)={0x8, 0x35, 0x2, 0x3}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) fspick(r0, &(0x7f0000000300)='./file0\x00', 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000006c0)='batadv\x00', &(0x7f0000000700)='./file0\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:41:14 executing program 4: r0 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(0x0, r0) write$P9_RLOCK(r0, &(0x7f00000002c0)={0x8, 0x35, 0x2, 0x3}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) fspick(r0, &(0x7f0000000300)='./file0\x00', 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000006c0)='batadv\x00', &(0x7f0000000700)='./file0\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:41:14 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:41:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 08:41:14 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x0) preadv2(r1, &(0x7f0000001d80)=[{&(0x7f0000000100)=""/217, 0x4fc622cd219498b5}], 0x1, 0x0, 0x0, 0x0) 08:41:14 executing program 6: r0 = fork() getpriority(0x0, r0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000080)='map_files\x00') r2 = fork() kcmp(0x0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) kcmp(r0, r2, 0x3, r1, r1) fspick(r1, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0xc0f85403, &(0x7f0000000040)={{0x1}}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000000)={r5, r1, 0x1}) 08:41:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:41:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:41:14 executing program 0: sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x810, 0x0, 0x0) 08:41:15 executing program 4: r0 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(0x0, r0) write$P9_RLOCK(r0, &(0x7f00000002c0)={0x8, 0x35, 0x2, 0x3}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) fspick(r0, &(0x7f0000000300)='./file0\x00', 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000006c0)='batadv\x00', &(0x7f0000000700)='./file0\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:41:15 executing program 3: sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x810, 0x0, 0x0) 08:41:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:41:15 executing program 4: r0 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(0x0, r0) write$P9_RLOCK(r0, &(0x7f00000002c0)={0x8, 0x35, 0x2, 0x3}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) fspick(r0, &(0x7f0000000300)='./file0\x00', 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000006c0)='batadv\x00', &(0x7f0000000700)='./file0\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:41:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:41:15 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 08:41:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "2b8bdd7c4ddf64e573fb90df56398a1720f4258b059e1284a5e036e5b36663a4bb5f524aaa3cddc9979de0ac95be0cfe5d2da5789a5f0a9f69873c1d89b4a5c44047b1d152345682dc9509f6718ca65d"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, 0x0, "9e2550c22db3e71843aef7ed344e875f82ad11808b6f453b40abf8c2a09fbef9396c024d7e16ef99b6002dc647a600e4c072cbb15053db46562576eaffe309a49cae78a40c3b228860c5c66f4283c102"}, 0xd8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) 08:41:15 executing program 6: timerfd_create(0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000100)=""/147, 0x93, 0x0) 08:41:15 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x0) preadv2(r1, &(0x7f0000001d80)=[{&(0x7f0000000100)=""/217, 0x4fc622cd219498b5}], 0x1, 0x0, 0x0, 0x0) 08:41:15 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) statx(r0, 0x0, 0x1000, 0xfeffffff, 0x0) 08:41:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)="e9a9ad812a240061b62e70490538bbc45d6dd9c244dc7de0d2777ba832a457cddc3ae61b5f0f57857eb7f688bf8c9cefb46caedeec9506e0df828d32f57fbc8da0930b79b68832556db3dfaa26cc7f1ce4c914389a2595df56f962c8655c3cd7ba8aa6ad6727e66a4008ee1b", 0x6c}], 0x1) 08:41:15 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r1, 0x0) 08:41:15 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:41:15 executing program 2: prctl$PR_CAPBSET_DROP(0x18, 0x27) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f73322e6e6c383032313100d70e337779a534f73be04a461c3dd6e2294b409d137641510f8fb031f9eb927ab06fb661b9b0061202cf9601238b70af26415bc38dd1844d7bc4943339808aa0bb6a494f75a8c0592051b8c6529e666bf9bc"]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000000480)=[0x0, 0x0]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 08:41:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:41:16 executing program 0: sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x810, 0x0, 0x0) 08:41:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000700)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001b40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 08:41:16 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2) 08:41:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)) 08:41:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000080), 0x4) 08:41:16 executing program 3: sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x810, 0x0, 0x0) 08:41:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x16}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 08:41:16 executing program 4: r0 = epoll_create(0x3) flistxattr(r0, &(0x7f00000000c0)=""/129, 0xffffffffffffff5d) 08:41:16 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 08:41:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x2c, r2, 0xa19, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_CHANNELS={0x8}]}, 0x2c}}, 0x0) [ 140.956094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 08:41:16 executing program 1: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 08:41:16 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000180)={@lba=0x3, 0x0, 0x0, 0x0}) 08:41:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000700)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001b40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 08:41:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)) 08:41:16 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x10, 0x2}], 0xff2f) 08:41:16 executing program 2: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x8, 0x0, {r0}}, 0x20) 08:41:16 executing program 0: sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x810, 0x0, 0x0) 08:41:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)) 08:41:16 executing program 1: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 08:41:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000700)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001b40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 08:41:16 executing program 2: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x8, 0x0, {r0}}, 0x20) 08:41:16 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x300) 08:41:16 executing program 7: mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x101) 08:41:16 executing program 3: sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x810, 0x0, 0x0) 08:41:16 executing program 2: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x8, 0x0, {r0}}, 0x20) 08:41:16 executing program 1: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 08:41:16 executing program 4: io_setup(0x3, &(0x7f0000000040)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="686737499d74"}, 0x14) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x600}]) 08:41:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000080)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 08:41:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000700)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001b40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 08:41:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)) [ 141.738015] loop7: detected capacity change from 0 to 512 [ 141.776155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.786751] ext4 filesystem being mounted at /syzkaller-testdir853216490/syzkaller.etJg4y/14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.805909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:41:17 executing program 1: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 08:41:17 executing program 2: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x8, 0x0, {r0}}, 0x20) [ 141.879156] loop7: detected capacity change from 0 to 512 [ 141.904933] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.909241] ext4 filesystem being mounted at /syzkaller-testdir853216490/syzkaller.etJg4y/14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.918170] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:41:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840), 0x4) 08:41:17 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x54}, {0x6}]}) io_uring_setup(0x0, 0x0) 08:41:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082102, &(0x7f0000000000)) 08:41:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0xbc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x18}}], 0x2, 0x0) 08:41:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000080)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 08:41:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000b80)={0xa, 0x0, 0x0, @private0}, 0x17) [ 142.464498] audit: type=1326 audit(1764232877.741:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4160 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb2969db19 code=0x0 [ 142.474356] loop7: detected capacity change from 0 to 512 [ 142.510610] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:41:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=')', 0x1}], 0x1, 0x0) [ 142.517448] ext4 filesystem being mounted at /syzkaller-testdir853216490/syzkaller.etJg4y/15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.526170] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:41:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xaf91}) [ 143.300409] audit: type=1326 audit(1764232878.577:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4160 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb2969db19 code=0x0 08:41:18 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)={0xe8, 0x10, 0xffffffffffffffff}, 0xe8}], 0x1}, 0x0) 08:41:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f0000000100)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x0, @unused=[0xfff, 0x0, 0x5], @devid}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 08:41:18 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mount$cgroup(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 08:41:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000080)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 08:41:18 executing program 1: syz_io_uring_setup(0x3fc8, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 08:41:18 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x0, 0xffffffff, 0x8001}) 08:41:18 executing program 2: futex(0x0, 0x5, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) 08:41:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) [ 143.396553] loop7: detected capacity change from 0 to 512 08:41:18 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x22002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 143.437429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.470306] ext4 filesystem being mounted at /syzkaller-testdir853216490/syzkaller.etJg4y/16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.500146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.504545] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.6'. 08:41:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4a, &(0x7f0000000100), 0x4) 08:41:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x28}], 0x1}, 0x0) 08:41:18 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f0000000400)) 08:41:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x43, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 143.647209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 08:41:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, r1, 0x0, 0x0) 08:41:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 08:41:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000080)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 08:41:18 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001040)={0x1, "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"}, 0x401, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000004f80)={{0x1, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, 0x0, 0xf4, 0x0, 0xffffffffffffffff}) [ 143.708523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 08:41:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x6}, @void}}}, 0x24}}, 0x0) 08:41:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) [ 143.805882] loop7: detected capacity change from 0 to 512 08:41:19 executing program 3: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0}) [ 143.893235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.904457] ext4 filesystem being mounted at /syzkaller-testdir853216490/syzkaller.etJg4y/17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.927539] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:41:19 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 08:41:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000540), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000480)={0x0, 0x3}, 0x4) 08:41:19 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) 08:41:19 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, 0x0) 08:41:19 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4) 08:41:19 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x4840, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x80, 0x8, 0x1d, 0x81, 0x0, 0x401, 0x80222, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_config_ext={0x4eec, 0xccf8}, 0x208, 0x2e5, 0x6, 0x7, 0x9, 0x789, 0x8, 0x0, 0x200, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x8) 08:41:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x6}, @void}}}, 0x24}}, 0x0) [ 144.084284] Bluetooth: hci0: connection err: -111 [ 144.087141] Bluetooth: hci0: connection err: -111 [ 144.092889] audit: type=1326 audit(1764232879.369:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4237 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9ac9aab19 code=0x0 [ 144.141442] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 08:41:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x6}, @void}}}, 0x24}}, 0x0) 08:41:19 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) 08:41:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x0, 0x0, 0x338}) [ 144.171178] Bluetooth: hci0: connection err: -111 08:41:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) tee(r0, 0xffffffffffffffff, 0xffffffff, 0x0) 08:41:19 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) 08:41:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x6}, @void}}}, 0x24}}, 0x0) [ 144.222083] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 144.278302] Bluetooth: hci0: connection err: -111 08:41:20 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4) 08:41:20 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, 0x0) 08:41:20 executing program 4: perf_event_open(&(0x7f0000002840)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x2}) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000002000100ff"], 0x0) [ 145.022902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:20 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) 08:41:20 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) 08:41:20 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 08:41:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 08:41:20 executing program 6: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x80}, 0x0) [ 145.029085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.036726] Bluetooth: hci0: connection err: -111 08:41:20 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x2, 0x0, 0xfffffffc}) [ 145.103720] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 08:41:20 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4) 08:41:20 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000000)) 08:41:20 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000180)=0x3, 0x4) 08:41:20 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 08:41:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x130) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000040)) 08:41:20 executing program 4: perf_event_open(&(0x7f0000002840)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x2}) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000002000100ff"], 0x0) 08:41:20 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4) 08:41:20 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, 0x0) 08:41:20 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 08:41:20 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 145.368902] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 08:41:20 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 08:41:20 executing program 4: perf_event_open(&(0x7f0000002840)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x2}) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000002000100ff"], 0x0) 08:41:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) read(r0, 0x0, 0x0) 08:41:20 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fadvise64(r0, 0x0, 0x6d, 0x2) 08:41:20 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 08:41:20 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, 0x0) 08:41:20 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 08:41:20 executing program 4: perf_event_open(&(0x7f0000002840)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x2}) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000002000100ff"], 0x0) 08:41:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) read(r0, 0x0, 0x0) [ 145.601990] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 08:41:20 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), 0x4) 08:41:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffe, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) fork() 08:41:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x14, 0x1c, 0x141, &(0x7f00000003c0)="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"}) 08:41:20 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:41:20 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 08:41:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) read(r0, 0x0, 0x0) 08:41:21 executing program 7: r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x7fffffffffffffff}) 08:41:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@abort}]}) 08:41:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40044591, 0x0) read(r0, 0x0, 0x0) [ 145.825183] No source specified 08:41:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000001080)=0x4, 0x4) 08:41:21 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x80081272, &(0x7f0000000480)) [ 145.827582] No source specified 08:41:21 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:41:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc}) 08:41:21 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x800) 08:41:21 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x0, &(0x7f00000017c0)={0x200008}, 0x20) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/243) 08:41:21 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:41:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = signalfd(r0, &(0x7f0000000040)={[0x6]}, 0x8) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0xfff, 0xfd0e, 0x1ff, 0x200, 0xfffd, 0x800}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)='Y', 0x1}], 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x4, 0x400, 0x5, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffe}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 08:41:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0xffffffff, 0x400}, 0x1c) 08:41:21 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x80081272, &(0x7f0000000480)) 08:41:21 executing program 5: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/239, 0xef, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000340), 0x4) 08:41:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc}) 08:41:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 08:41:22 executing program 1: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/239, 0xef, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000340), 0x4) 08:41:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:41:22 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc}) 08:41:22 executing program 5: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/239, 0xef, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000340), 0x4) 08:41:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x42, 0x0) 08:41:22 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x80081272, &(0x7f0000000480)) 08:41:22 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:41:22 executing program 5: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/239, 0xef, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000340), 0x4) 08:41:22 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc}) 08:41:22 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x80081272, &(0x7f0000000480)) 08:41:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x42, 0x0) 08:41:22 executing program 1: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/239, 0xef, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000340), 0x4) 08:41:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x102, 0x0) 08:41:22 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x545d, &(0x7f0000000080)=0x80) 08:41:22 executing program 5: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/239, 0xef, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000340), 0x4) 08:41:22 executing program 6: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'gre0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40900}, 0x24000800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socketpair(0x11, 0x2, 0x9, &(0x7f0000000740)) 08:41:22 executing program 1: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/239, 0xef, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000340), 0x4) 08:41:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:41:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x42, 0x0) 08:41:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:41:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000000)={0xe}) 08:41:22 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001cc0)=[{0x0}, {0x0}, {&(0x7f0000001a80)="d8", 0x1}], 0x3, 0x0) 08:41:22 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000140)='./file0\x00', 0x0, 0xff1c, 0x0, 0x0, &(0x7f0000000040)={[{@huge_never}]}) 08:41:23 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x42, 0x0) 08:41:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) [ 148.387185] syz-executor.6 (4453) used greatest stack depth: 24120 bytes left 08:41:23 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) capget(&(0x7f0000000380), 0x0) 08:41:23 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="75d2077fdbdcd5374d79754be401da2d00171e68d27a788ce4e97c593eb2268c0df36576b3dbb1287277dd5cf001fc04e57cce1fe721abc364f43d57646cb757b924ba", 0x43, 0x45be}]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:41:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000000)={0xe}) 08:41:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000100)) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x0, 0x9}) close(r0) 08:41:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="f9", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r1, r2) 08:41:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:41:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) [ 148.467169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 148.467930] I/O error, dev sr0, sector 34 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.475926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 148.476367] I/O error, dev sr0, sector 35 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 08:41:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:41:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x38, 0x2}], 0xff2f) 08:41:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000100)) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x0, 0x9}) close(r0) [ 148.521554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 148.522084] I/O error, dev sr0, sector 34 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.527217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 148.527675] I/O error, dev sr0, sector 35 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 08:41:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) 08:41:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000000)={0xe}) 08:41:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000100)) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x0, 0x9}) close(r0) 08:41:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000000)={0xe}) 08:41:23 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) socketpair(0x11, 0x2, 0x9, &(0x7f0000000740)) 08:41:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001780), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x21, 0x0, @buffer={0x9, 0x0, 0x0}, &(0x7f0000001040)="93a0cb80020065e7816ceefd9d22a4940000000004000800"/33, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 149.057124] syz-executor.0 (4467) used greatest stack depth: 22832 bytes left 08:41:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000100)) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x0, 0x9}) close(r0) 08:41:24 executing program 1: r0 = socket(0x11, 0xa, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000380)) 08:41:24 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@nl=@unspec={0x0, 0x2}, 0x80) 08:41:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:41:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:41:24 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 08:41:24 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:41:24 executing program 4: futex(&(0x7f0000000880)=0x2, 0xc, 0x1, 0x0, &(0x7f0000001b40), 0x2) 08:41:24 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000480)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast2}, 'veth1_virt_wifi\x00'}) 08:41:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') pread64(r0, &(0x7f0000000240)=""/217, 0xd9, 0x100) 08:41:24 executing program 1: creat(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ppoll(&(0x7f0000000180)=[{r0, 0x4304}], 0x1, 0x0, 0x0, 0x0) 08:41:24 executing program 7: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x2, 0x2, 0x5, 0x0, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000100)={{0x0, 0x0, 0x80, 0x1}, 0x3b6, 0x0, 'id0\x00', 'timer1\x00'}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000340)={0xfffffffffffffffd, 0x1, 0xf04, 0x3, 0xfffffbff}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0xe20, 0x0, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000800)={{}, 0x0, 0x6, @inherit={0x0, 0x0}, @devid=r0}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001900), 0x82801, 0x0) 08:41:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') pread64(r0, &(0x7f0000000240)=""/217, 0xd9, 0x100) 08:41:24 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)) fallocate(r0, 0x10, 0x0, 0x100000000) 08:41:24 executing program 4: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}) clock_getres(0x0, &(0x7f00000005c0)) 08:41:24 executing program 1: creat(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ppoll(&(0x7f0000000180)=[{r0, 0x4304}], 0x1, 0x0, 0x0, 0x0) 08:41:24 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) fallocate(r0, 0x11, 0x80000000, 0x6ef) ftruncate(r0, 0x10000) 08:41:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') pread64(r0, &(0x7f0000000240)=""/217, 0xd9, 0x100) 08:41:25 executing program 7: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x6) fcntl$addseals(r0, 0x409, 0xe) ftruncate(r0, 0x8800000) 08:41:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000180)) 08:41:25 executing program 1: creat(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ppoll(&(0x7f0000000180)=[{r0, 0x4304}], 0x1, 0x0, 0x0, 0x0) 08:41:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 08:41:25 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) fallocate(r0, 0x11, 0x80000000, 0x6ef) ftruncate(r0, 0x10000) 08:41:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000240)=0xffffff7f) 08:41:25 executing program 1: creat(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ppoll(&(0x7f0000000180)=[{r0, 0x4304}], 0x1, 0x0, 0x0, 0x0) 08:41:25 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000200)) 08:41:25 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) dup2(r0, r1) 08:41:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') pread64(r0, &(0x7f0000000240)=""/217, 0xd9, 0x100) 08:41:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000008a80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24048040) 08:41:25 executing program 0: write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0xdb642e85a1face61) 08:41:25 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) fallocate(r0, 0x11, 0x80000000, 0x6ef) ftruncate(r0, 0x10000) 08:41:25 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000200)) 08:41:25 executing program 6: keyctl$invalidate(0x12, 0x0) 08:41:25 executing program 3: getitimer(0x3, 0x0) 08:41:25 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) fallocate(r0, 0x11, 0x80000000, 0x6ef) ftruncate(r0, 0x10000) 08:41:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, 0x0}}], 0x1, 0x20000000) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 08:41:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) 08:41:25 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000200)) 08:41:25 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x2) 08:41:25 executing program 0: setrlimit(0x4, &(0x7f0000000000)) 08:41:25 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 08:41:25 executing program 3: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001900), 0x82801, 0x0) 08:41:25 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0) 08:41:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f0000000100)) 08:41:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 08:41:25 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000fc0)=0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) 08:41:25 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000200)) 08:41:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000096c0)=0x3508, 0x4) 08:41:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syncfs(r0) 08:41:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={[], [{@defcontext={'defcontext', 0x3d, 'root'}, 0x22}]}) 08:41:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@window, @sack_perm, @timestamp, @mss], 0x4) 08:41:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x52) 08:41:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\xb9\xf5\xe8\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/114, 0x41, 0x0, 0x0) r1 = dup2(r0, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(r1, &(0x7f0000000000)={0x0, 0x37}) 08:41:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}}, 0x0) 08:41:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0xc0f85403, &(0x7f0000000040)={{0x1}}) 08:41:26 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x4) close_range(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000400), 0x18, 0x244480) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) r2 = fork() ptrace(0x10, r2) ptrace(0x8, r2) [ 150.867721] SELinux: security_context_str_to_sid (root,errors=continue) failed with errno=-22 [ 150.884106] ================================================================== [ 150.884847] BUG: KASAN: slab-use-after-free in __fput+0xaae/0xb50 [ 150.885534] Read of size 8 at addr ffff88804d8b54f8 by task syz-executor.6/4625 [ 150.886217] [ 150.886409] CPU: 1 UID: 0 PID: 4625 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251127 #1 PREEMPT(voluntary) [ 150.886424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 150.886432] Call Trace: [ 150.886436] [ 150.886441] dump_stack_lvl+0xca/0x120 [ 150.886464] print_report+0xcb/0x610 [ 150.886485] ? __virt_addr_valid+0x100/0x5d0 [ 150.886500] ? __fput+0xaae/0xb50 [ 150.886518] ? __fput+0xaae/0xb50 [ 150.886535] kasan_report+0xca/0x100 [ 150.886558] SELinux: security_context_str_to_sid (root,errors=continue) failed with errno=-22 [ 150.886555] ? __fput+0xaae/0xb50 [ 150.886578] __fput+0xaae/0xb50 [ 150.886600] task_work_run+0x172/0x280 [ 150.886619] ? __pfx_task_work_run+0x10/0x10 [ 150.886635] ? do_raw_spin_unlock+0x53/0x220 [ 150.886657] do_exit+0x856/0x2950 [ 150.886677] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 150.886696] ? __pfx_do_exit+0x10/0x10 [ 150.886713] ? find_held_lock+0x2b/0x80 [ 150.886724] ? get_signal+0x985/0x25d0 [ 150.886738] do_group_exit+0xd3/0x2a0 [ 150.886756] get_signal+0x24aa/0x25d0 [ 150.886768] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 150.886788] ? do_mq_notify+0x2a4/0xe90 [ 150.886807] ? __pfx_get_signal+0x10/0x10 [ 150.886819] ? do_futex+0x135/0x370 [ 150.886839] arch_do_signal_or_restart+0x80/0x7a0 [ 150.886859] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 150.886878] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 150.886896] ? __x64_sys_futex+0x1c9/0x4d0 [ 150.886911] ? __x64_sys_futex+0x1d2/0x4d0 [ 150.886929] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 150.886946] ? __pfx___x64_sys_futex+0x10/0x10 [ 150.886966] exit_to_user_mode_loop+0x92/0x4d0 [ 150.886982] do_syscall_64+0x3c3/0x420 [ 150.886996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.887008] RIP: 0033:0x7fdb2969db19 [ 150.887017] Code: Unable to access opcode bytes at 0x7fdb2969daef. [ 150.887022] RSP: 002b:00007fdb26c13218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 150.887034] RAX: fffffffffffffe00 RBX: 00007fdb297b0f68 RCX: 00007fdb2969db19 [ 150.887041] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb297b0f68 [ 150.887049] RBP: 00007fdb297b0f60 R08: 0000000000000000 R09: 0000000000000000 [ 150.887056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb297b0f6c [ 150.887063] R13: 00007ffc02f498af R14: 00007fdb26c13300 R15: 0000000000022000 [ 150.887078] [ 150.887081] [ 150.912268] Allocated by task 4625: [ 150.912638] kasan_save_stack+0x24/0x50 [ 150.913104] kasan_save_track+0x14/0x30 [ 150.913477] __kasan_slab_alloc+0x59/0x70 [ 150.913948] kmem_cache_alloc_lru_noprof+0x217/0x720 [ 150.914353] __d_alloc+0x34/0xa10 [ 150.914638] d_alloc+0x4a/0x1e0 [ 150.914911] lookup_one_qstr_excl+0x174/0x270 [ 150.915317] start_creating_noperm+0x94/0xd0 [ 150.915815] do_mq_open+0x25f/0x980 [ 150.916133] __x64_sys_mq_open+0x14f/0x1e0 [ 150.916582] do_syscall_64+0xbf/0x420 [ 150.917011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.917421] [ 150.917559] Freed by task 22: [ 150.917814] kasan_save_stack+0x24/0x50 [ 150.918136] kasan_save_track+0x14/0x30 [ 150.918456] kasan_save_free_info+0x3a/0x60 [ 150.918898] __kasan_slab_free+0x43/0x70 [ 150.919334] kmem_cache_free+0x2cd/0x660 [ 150.919799] rcu_core+0x73c/0x1ed0 [ 150.920128] handle_softirqs+0x1b1/0x740 [ 150.920584] run_ksoftirqd+0x2e/0x60 [ 150.920892] smpboot_thread_fn+0x41d/0x9d0 [ 150.921232] kthread+0x3c8/0x740 [ 150.921506] ret_from_fork+0x67a/0x7a0 [ 150.921824] ret_from_fork_asm+0x1a/0x30 [ 150.922188] [ 150.922362] Last potentially related work creation: [ 150.922913] kasan_save_stack+0x24/0x50 [ 150.923268] kasan_record_aux_stack+0x89/0xa0 [ 150.923759] __call_rcu_common.constprop.0+0x70/0xad0 [ 150.924370] dentry_free+0xc3/0x160 [ 150.924676] __dentry_kill+0x498/0x5f0 [ 150.925077] finish_dput+0x75/0x430 [ 150.925469] dput.part.0+0x43f/0x530 [ 150.925899] dput+0x1f/0x30 [ 150.926151] __fput+0x515/0xb50 [ 150.926508] task_work_run+0x172/0x280 [ 150.926951] do_exit+0x856/0x2950 [ 150.927241] do_group_exit+0xd3/0x2a0 [ 150.927631] get_signal+0x24aa/0x25d0 [ 150.928029] arch_do_signal_or_restart+0x80/0x7a0 [ 150.928518] exit_to_user_mode_loop+0x92/0x4d0 [ 150.928994] do_syscall_64+0x3c3/0x420 [ 150.929435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.929848] [ 150.930028] The buggy address belongs to the object at ffff88804d8b5490 [ 150.930028] which belongs to the cache dentry of size 312 [ 150.931253] The buggy address is located 104 bytes inside of [ 150.931253] freed 312-byte region [ffff88804d8b5490, ffff88804d8b55c8) [ 150.932516] [ 150.932654] The buggy address belongs to the physical page: [ 150.933150] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d8b4 [ 150.934014] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 150.934668] memcg:ffff88801f7b1201 [ 150.935048] flags: 0x100000000000040(head|node=0|zone=1) [ 150.935642] page_type: f5(slab) [ 150.935910] raw: 0100000000000040 ffff888009462280 dead000000000122 0000000000000000 [ 150.936682] raw: 0000000000000000 0000000080150015 00000000f5000000 ffff88801f7b1201 [ 150.937504] head: 0100000000000040 ffff888009462280 dead000000000122 0000000000000000 [ 150.938236] head: 0000000000000000 0000000080150015 00000000f5000000 ffff88801f7b1201 [ 150.939117] head: 0100000000000001 ffffea0001362d01 00000000ffffffff 00000000ffffffff [ 150.939887] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 150.940636] page dumped because: kasan: bad access detected [ 150.941238] [ 150.941379] Memory state around the buggy address: [ 150.941871] ffff88804d8b5380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.942590] ffff88804d8b5400: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 150.943155] >ffff88804d8b5480: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.943719] ^ [ 150.944278] ffff88804d8b5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.944843] ffff88804d8b5580: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 150.945411] ================================================================== [ 150.947356] Disabling lock debugging due to kernel taint [ 150.948769] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 150.949935] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 150.950673] CPU: 1 UID: 0 PID: 4625 Comm: syz-executor.6 Tainted: G B 6.18.0-rc7-next-20251127 #1 PREEMPT(voluntary) [ 150.951887] Tainted: [B]=BAD_PAGE [ 150.952265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 150.953095] RIP: 0010:__fput+0x1cc/0xb50 [ 150.953543] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f6 08 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7e 68 49 8d 7f 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c9 08 00 00 48 ba 00 00 00 00 00 fc ff df 49 8b [ 150.955183] RSP: 0018:ffff888017367aa0 EFLAGS: 00010216 [ 150.955785] RAX: dffffc0000000000 RBX: ffff888018a5a8c0 RCX: ffffffff813a4cef [ 150.956469] RDX: 0000000000000005 RSI: ffffffff81b3432e RDI: 0000000000000028 [ 150.957225] RBP: ffff888013b05340 R08: 0000000000000001 R09: fffffbfff0f5e698 [ 150.957904] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888013b05380 [ 150.958463] R13: 0000000000000008 R14: ffff88804d8b5490 R15: 0000000000000000 [ 150.959167] FS: 0000000000000000(0000) GS:ffff8880e547a000(0000) knlGS:0000000000000000 [ 150.960035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.960609] CR2: 0000001b2d722000 CR3: 000000000e3ed000 CR4: 0000000000350ef0 [ 150.961357] Call Trace: [ 150.961569] [ 150.961824] task_work_run+0x172/0x280 [ 150.962259] ? __pfx_task_work_run+0x10/0x10 [ 150.962694] ? do_raw_spin_unlock+0x53/0x220 [ 150.963159] do_exit+0x856/0x2950 [ 150.963536] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 150.964085] ? __pfx_do_exit+0x10/0x10 [ 150.964510] ? find_held_lock+0x2b/0x80 [ 150.964890] ? get_signal+0x985/0x25d0 [ 150.965290] do_group_exit+0xd3/0x2a0 [ 150.965706] get_signal+0x24aa/0x25d0 [ 150.966036] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 150.966582] ? do_mq_notify+0x2a4/0xe90 [ 150.966985] ? __pfx_get_signal+0x10/0x10 [ 150.967406] ? do_futex+0x135/0x370 [ 150.967787] arch_do_signal_or_restart+0x80/0x7a0 [ 150.968291] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 150.968804] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 150.969427] ? __x64_sys_futex+0x1c9/0x4d0 [ 150.969848] ? __x64_sys_futex+0x1d2/0x4d0 [ 150.970309] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 150.970975] ? __pfx___x64_sys_futex+0x10/0x10 [ 150.971466] exit_to_user_mode_loop+0x92/0x4d0 [ 150.971838] do_syscall_64+0x3c3/0x420 [ 150.972240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.972768] RIP: 0033:0x7fdb2969db19 [ 150.973170] Code: Unable to access opcode bytes at 0x7fdb2969daef. [ 150.973658] RSP: 002b:00007fdb26c13218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 150.974366] RAX: fffffffffffffe00 RBX: 00007fdb297b0f68 RCX: 00007fdb2969db19 [ 150.975127] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb297b0f68 [ 150.975833] RBP: 00007fdb297b0f60 R08: 0000000000000000 R09: 0000000000000000 [ 150.976596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb297b0f6c [ 150.977167] R13: 00007ffc02f498af R14: 00007fdb26c13300 R15: 0000000000022000 [ 150.977826] [ 150.978072] Modules linked in: [ 150.978464] ---[ end trace 0000000000000000 ]--- [ 150.978939] RIP: 0010:__fput+0x1cc/0xb50 [ 150.979382] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f6 08 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7e 68 49 8d 7f 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c9 08 00 00 48 ba 00 00 00 00 00 fc ff df 49 8b [ 150.981241] RSP: 0018:ffff888017367aa0 EFLAGS: 00010216 [ 150.981759] RAX: dffffc0000000000 RBX: ffff888018a5a8c0 RCX: ffffffff813a4cef [ 150.982525] RDX: 0000000000000005 RSI: ffffffff81b3432e RDI: 0000000000000028 [ 150.983228] RBP: ffff888013b05340 R08: 0000000000000001 R09: fffffbfff0f5e698 [ 150.984017] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888013b05380 [ 150.984727] R13: 0000000000000008 R14: ffff88804d8b5490 R15: 0000000000000000 [ 150.985488] FS: 0000000000000000(0000) GS:ffff8880e547a000(0000) knlGS:0000000000000000 [ 150.986316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.987038] CR2: 0000001b2d722000 CR3: 000000000e3ed000 CR4: 0000000000350ef0 [ 150.987707] Fixing recursive fault but reboot is needed! [ 150.988142] BUG: scheduling while atomic: syz-executor.6/4625/0x00000000 [ 150.988669] INFO: lockdep is turned off. [ 150.989006] Modules linked in: [ 150.989348] CPU: 1 UID: 0 PID: 4625 Comm: syz-executor.6 Tainted: G B D 6.18.0-rc7-next-20251127 #1 PREEMPT(voluntary) [ 150.989366] Tainted: [B]=BAD_PAGE, [D]=DIE [ 150.989370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 150.989376] Call Trace: [ 150.989380] [ 150.989384] dump_stack_lvl+0xfa/0x120 [ 150.989404] __schedule_bug+0xb9/0x100 [ 150.989420] __schedule+0x249f/0x46a0 [ 150.989438] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 150.989454] ? do_raw_spin_lock+0x123/0x260 [ 150.989473] ? __pfx___schedule+0x10/0x10 [ 150.989489] ? do_task_dead+0x3e/0x110 [ 150.989500] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 150.989517] ? do_task_dead+0x3e/0x110 [ 150.989527] do_task_dead+0xdc/0x110 [ 150.989538] make_task_dead+0x373/0x3b0 [ 150.989553] ? do_syscall_64+0x3c3/0x420 [ 150.989565] rewind_stack_and_make_dead+0x16/0x20 [ 150.989581] RIP: 0033:0x7fdb2969db19 [ 150.989589] Code: Unable to access opcode bytes at 0x7fdb2969daef. [ 150.989594] RSP: 002b:00007fdb26c13218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 150.989604] RAX: fffffffffffffe00 RBX: 00007fdb297b0f68 RCX: 00007fdb2969db19 [ 150.989611] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb297b0f68 [ 150.989618] RBP: 00007fdb297b0f60 R08: 0000000000000000 R09: 0000000000000000 [ 150.989625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb297b0f6c [ 150.989631] R13: 00007ffc02f498af R14: 00007fdb26c13300 R15: 0000000000022000 [ 150.989645] 08:41:26 executing program 4: io_uring_setup(0x74d3, &(0x7f0000000000)) 08:41:26 executing program 2: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000740), 0x0) 08:41:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB='errors=']) 08:41:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000040)) 08:41:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}}, 0x0) [ 151.115232] ext3: Bad value for 'errors' [ 151.132976] ext3: Bad value for 'errors' 08:41:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syncfs(r0) 08:41:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x1b, 0x9, "d8246b7796acd6a375"}}) 08:41:26 executing program 0: mount_setattr(0xffffffffffffff9c, 0x0, 0x9800, &(0x7f0000000000)={0x0, 0x0, 0x340000}, 0x20) VM DIAGNOSIS: 08:41:26 Registers: info registers vcpu 0 RAX=0000000000000040 RBX=0000000000000040 RCX=ffffffff825b9bda RDX=00000000000101f4 RSI=ffffffff825b9be8 RDI=0000000000000007 RBP=ffff88800b3a01a0 RSP=ffff88800ee476f8 R8 =0000000000000000 R9 =fffffbfff0cca14a R10=00000000000101f4 R11=0000000000000001 R12=00000000000101f4 R13=ffff88800b3a0050 R14=ffff88800b3a0048 R15=ffff88800b3a0060 RIP=ffffffff825b9bee RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e537a000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa80f6bd000 CR3=000000000dc54000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff82955e75 RDI=ffffffff88989ac0 RBP=ffffffff88989a80 RSP=ffff8880173674d0 R8 =00000000ffffffff R9 =ffffed1002e6ce90 R10=0000000000000000 R11=3a78756e694c4553 R12=0000000000000000 R13=ffffffff88989ad0 R14=ffffffff88989a80 R15=ffffffff88989d40 RIP=ffffffff82955ecd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e547a000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d722000 CR3=000000000e3ed000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000