Warning: Permanently added '[localhost]:1854' (ECDSA) to the list of known hosts. 2025/08/29 13:16:45 fuzzer started 2025/08/29 13:16:46 dialing manager at localhost:43077 syzkaller login: [ 50.185880] cgroup: Unknown subsys name 'net' [ 50.217652] cgroup: Unknown subsys name 'cpuset' [ 50.223872] cgroup: Unknown subsys name 'rlimit' 2025/08/29 13:16:55 syscalls: 2214 2025/08/29 13:16:55 code coverage: enabled 2025/08/29 13:16:55 comparison tracing: enabled 2025/08/29 13:16:55 extra coverage: enabled 2025/08/29 13:16:55 setuid sandbox: enabled 2025/08/29 13:16:55 namespace sandbox: enabled 2025/08/29 13:16:55 Android sandbox: enabled 2025/08/29 13:16:55 fault injection: enabled 2025/08/29 13:16:55 leak checking: enabled 2025/08/29 13:16:55 net packet injection: enabled 2025/08/29 13:16:55 net device setup: enabled 2025/08/29 13:16:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 13:16:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 13:16:55 USB emulation: enabled 2025/08/29 13:16:55 hci packet injection: enabled 2025/08/29 13:16:55 wifi device emulation: enabled 2025/08/29 13:16:55 802.15.4 emulation: enabled 2025/08/29 13:16:55 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 13:16:55 fetching corpus: 49, signal 22513/26000 (executing program) 2025/08/29 13:16:55 fetching corpus: 99, signal 31619/36635 (executing program) 2025/08/29 13:16:55 fetching corpus: 149, signal 43726/49903 (executing program) 2025/08/29 13:16:56 fetching corpus: 199, signal 50621/58016 (executing program) 2025/08/29 13:16:56 fetching corpus: 249, signal 56390/64952 (executing program) 2025/08/29 13:16:56 fetching corpus: 299, signal 62203/71817 (executing program) 2025/08/29 13:16:56 fetching corpus: 349, signal 64796/75594 (executing program) 2025/08/29 13:16:56 fetching corpus: 399, signal 69257/81051 (executing program) 2025/08/29 13:16:56 fetching corpus: 449, signal 72723/85498 (executing program) 2025/08/29 13:16:56 fetching corpus: 499, signal 76270/89865 (executing program) 2025/08/29 13:16:56 fetching corpus: 549, signal 79183/93694 (executing program) 2025/08/29 13:16:56 fetching corpus: 599, signal 81774/97161 (executing program) 2025/08/29 13:16:56 fetching corpus: 649, signal 83205/99602 (executing program) 2025/08/29 13:16:56 fetching corpus: 699, signal 86002/103158 (executing program) 2025/08/29 13:16:56 fetching corpus: 749, signal 88105/106070 (executing program) 2025/08/29 13:16:56 fetching corpus: 799, signal 90209/108957 (executing program) 2025/08/29 13:16:57 fetching corpus: 849, signal 91447/111063 (executing program) 2025/08/29 13:16:57 fetching corpus: 899, signal 93109/113543 (executing program) 2025/08/29 13:16:57 fetching corpus: 949, signal 95416/116573 (executing program) 2025/08/29 13:16:57 fetching corpus: 999, signal 96392/118434 (executing program) 2025/08/29 13:16:57 fetching corpus: 1049, signal 97981/120704 (executing program) 2025/08/29 13:16:57 fetching corpus: 1099, signal 100360/123625 (executing program) 2025/08/29 13:16:57 fetching corpus: 1149, signal 101723/125708 (executing program) 2025/08/29 13:16:57 fetching corpus: 1199, signal 103156/127731 (executing program) 2025/08/29 13:16:57 fetching corpus: 1249, signal 104108/129420 (executing program) 2025/08/29 13:16:57 fetching corpus: 1299, signal 105756/131568 (executing program) 2025/08/29 13:16:57 fetching corpus: 1349, signal 108518/134498 (executing program) 2025/08/29 13:16:58 fetching corpus: 1399, signal 109724/136298 (executing program) 2025/08/29 13:16:58 fetching corpus: 1449, signal 111184/138221 (executing program) 2025/08/29 13:16:58 fetching corpus: 1499, signal 112754/140255 (executing program) 2025/08/29 13:16:58 fetching corpus: 1549, signal 113964/141936 (executing program) 2025/08/29 13:16:58 fetching corpus: 1599, signal 115047/143527 (executing program) 2025/08/29 13:16:58 fetching corpus: 1649, signal 116134/145084 (executing program) 2025/08/29 13:16:58 fetching corpus: 1699, signal 117250/146620 (executing program) 2025/08/29 13:16:58 fetching corpus: 1749, signal 118422/148208 (executing program) 2025/08/29 13:16:58 fetching corpus: 1799, signal 119803/149872 (executing program) 2025/08/29 13:16:58 fetching corpus: 1849, signal 120697/151283 (executing program) 2025/08/29 13:16:59 fetching corpus: 1899, signal 121415/152531 (executing program) 2025/08/29 13:16:59 fetching corpus: 1949, signal 123090/154298 (executing program) 2025/08/29 13:16:59 fetching corpus: 1999, signal 123837/155560 (executing program) 2025/08/29 13:16:59 fetching corpus: 2049, signal 125852/157541 (executing program) 2025/08/29 13:16:59 fetching corpus: 2099, signal 126720/158787 (executing program) 2025/08/29 13:16:59 fetching corpus: 2149, signal 127701/160104 (executing program) 2025/08/29 13:16:59 fetching corpus: 2199, signal 128641/161326 (executing program) 2025/08/29 13:16:59 fetching corpus: 2249, signal 129585/162518 (executing program) 2025/08/29 13:16:59 fetching corpus: 2299, signal 130523/163744 (executing program) 2025/08/29 13:16:59 fetching corpus: 2349, signal 131556/164956 (executing program) 2025/08/29 13:16:59 fetching corpus: 2399, signal 132422/166110 (executing program) 2025/08/29 13:16:59 fetching corpus: 2449, signal 133048/167110 (executing program) 2025/08/29 13:16:59 fetching corpus: 2499, signal 133811/168165 (executing program) 2025/08/29 13:17:00 fetching corpus: 2549, signal 134942/169344 (executing program) 2025/08/29 13:17:00 fetching corpus: 2599, signal 135589/170269 (executing program) 2025/08/29 13:17:00 fetching corpus: 2649, signal 136426/171326 (executing program) 2025/08/29 13:17:00 fetching corpus: 2699, signal 137362/172404 (executing program) 2025/08/29 13:17:00 fetching corpus: 2749, signal 137869/173268 (executing program) 2025/08/29 13:17:00 fetching corpus: 2799, signal 138493/174209 (executing program) 2025/08/29 13:17:00 fetching corpus: 2849, signal 139575/175268 (executing program) 2025/08/29 13:17:00 fetching corpus: 2899, signal 140179/176176 (executing program) 2025/08/29 13:17:00 fetching corpus: 2949, signal 141389/177285 (executing program) 2025/08/29 13:17:00 fetching corpus: 2999, signal 142163/178180 (executing program) 2025/08/29 13:17:01 fetching corpus: 3049, signal 142580/178890 (executing program) 2025/08/29 13:17:01 fetching corpus: 3099, signal 143509/179828 (executing program) 2025/08/29 13:17:01 fetching corpus: 3149, signal 143979/180593 (executing program) 2025/08/29 13:17:01 fetching corpus: 3199, signal 144564/181354 (executing program) 2025/08/29 13:17:01 fetching corpus: 3249, signal 145060/182126 (executing program) 2025/08/29 13:17:01 fetching corpus: 3299, signal 145572/182897 (executing program) 2025/08/29 13:17:01 fetching corpus: 3349, signal 146304/183654 (executing program) 2025/08/29 13:17:01 fetching corpus: 3399, signal 147055/184372 (executing program) 2025/08/29 13:17:01 fetching corpus: 3449, signal 147671/185075 (executing program) 2025/08/29 13:17:01 fetching corpus: 3499, signal 148471/185836 (executing program) 2025/08/29 13:17:01 fetching corpus: 3549, signal 149408/186622 (executing program) 2025/08/29 13:17:02 fetching corpus: 3599, signal 150095/187352 (executing program) 2025/08/29 13:17:02 fetching corpus: 3649, signal 150689/188076 (executing program) 2025/08/29 13:17:02 fetching corpus: 3699, signal 151330/188682 (executing program) 2025/08/29 13:17:02 fetching corpus: 3749, signal 151860/189293 (executing program) 2025/08/29 13:17:02 fetching corpus: 3799, signal 152223/189877 (executing program) 2025/08/29 13:17:02 fetching corpus: 3849, signal 152837/190494 (executing program) 2025/08/29 13:17:02 fetching corpus: 3899, signal 153330/191044 (executing program) 2025/08/29 13:17:02 fetching corpus: 3949, signal 153861/191656 (executing program) 2025/08/29 13:17:02 fetching corpus: 3999, signal 154512/192238 (executing program) 2025/08/29 13:17:02 fetching corpus: 4049, signal 154973/192776 (executing program) 2025/08/29 13:17:03 fetching corpus: 4099, signal 155498/193420 (executing program) 2025/08/29 13:17:03 fetching corpus: 4149, signal 156142/193985 (executing program) 2025/08/29 13:17:03 fetching corpus: 4199, signal 156999/194531 (executing program) 2025/08/29 13:17:03 fetching corpus: 4249, signal 157749/195065 (executing program) 2025/08/29 13:17:03 fetching corpus: 4299, signal 158247/195562 (executing program) 2025/08/29 13:17:03 fetching corpus: 4349, signal 158640/196011 (executing program) 2025/08/29 13:17:03 fetching corpus: 4399, signal 158957/196456 (executing program) 2025/08/29 13:17:03 fetching corpus: 4449, signal 159416/196924 (executing program) 2025/08/29 13:17:03 fetching corpus: 4499, signal 159920/197398 (executing program) 2025/08/29 13:17:03 fetching corpus: 4549, signal 160310/197878 (executing program) 2025/08/29 13:17:03 fetching corpus: 4599, signal 160834/198358 (executing program) 2025/08/29 13:17:03 fetching corpus: 4649, signal 161221/198836 (executing program) 2025/08/29 13:17:04 fetching corpus: 4699, signal 161663/199252 (executing program) 2025/08/29 13:17:04 fetching corpus: 4749, signal 162111/199652 (executing program) 2025/08/29 13:17:04 fetching corpus: 4799, signal 162534/200056 (executing program) 2025/08/29 13:17:04 fetching corpus: 4849, signal 162899/200252 (executing program) 2025/08/29 13:17:04 fetching corpus: 4899, signal 163253/200255 (executing program) 2025/08/29 13:17:04 fetching corpus: 4949, signal 163596/200272 (executing program) 2025/08/29 13:17:04 fetching corpus: 4999, signal 163931/200302 (executing program) 2025/08/29 13:17:04 fetching corpus: 5049, signal 165113/200317 (executing program) 2025/08/29 13:17:04 fetching corpus: 5099, signal 165459/200319 (executing program) 2025/08/29 13:17:04 fetching corpus: 5149, signal 165872/200320 (executing program) 2025/08/29 13:17:04 fetching corpus: 5199, signal 166393/200381 (executing program) 2025/08/29 13:17:04 fetching corpus: 5249, signal 166836/200392 (executing program) 2025/08/29 13:17:05 fetching corpus: 5299, signal 167269/200395 (executing program) 2025/08/29 13:17:05 fetching corpus: 5349, signal 167578/200396 (executing program) 2025/08/29 13:17:05 fetching corpus: 5399, signal 168097/200413 (executing program) 2025/08/29 13:17:05 fetching corpus: 5449, signal 168692/200501 (executing program) 2025/08/29 13:17:05 fetching corpus: 5499, signal 169067/200517 (executing program) 2025/08/29 13:17:05 fetching corpus: 5549, signal 169366/200532 (executing program) 2025/08/29 13:17:05 fetching corpus: 5599, signal 169888/200555 (executing program) 2025/08/29 13:17:05 fetching corpus: 5649, signal 170280/200568 (executing program) 2025/08/29 13:17:05 fetching corpus: 5699, signal 170605/200594 (executing program) 2025/08/29 13:17:05 fetching corpus: 5749, signal 170955/200609 (executing program) 2025/08/29 13:17:05 fetching corpus: 5799, signal 171182/200645 (executing program) 2025/08/29 13:17:05 fetching corpus: 5849, signal 171547/200655 (executing program) 2025/08/29 13:17:06 fetching corpus: 5899, signal 171923/200661 (executing program) 2025/08/29 13:17:06 fetching corpus: 5949, signal 172334/200662 (executing program) 2025/08/29 13:17:06 fetching corpus: 5999, signal 172865/200662 (executing program) 2025/08/29 13:17:06 fetching corpus: 6049, signal 173276/200672 (executing program) 2025/08/29 13:17:06 fetching corpus: 6099, signal 173620/200689 (executing program) 2025/08/29 13:17:06 fetching corpus: 6149, signal 173994/200707 (executing program) 2025/08/29 13:17:06 fetching corpus: 6199, signal 174438/200711 (executing program) 2025/08/29 13:17:06 fetching corpus: 6249, signal 174866/200723 (executing program) 2025/08/29 13:17:06 fetching corpus: 6299, signal 175136/200726 (executing program) 2025/08/29 13:17:06 fetching corpus: 6349, signal 175414/200732 (executing program) 2025/08/29 13:17:06 fetching corpus: 6399, signal 175767/200743 (executing program) 2025/08/29 13:17:06 fetching corpus: 6449, signal 175977/200745 (executing program) 2025/08/29 13:17:06 fetching corpus: 6499, signal 176238/200746 (executing program) 2025/08/29 13:17:07 fetching corpus: 6549, signal 176660/200763 (executing program) 2025/08/29 13:17:07 fetching corpus: 6599, signal 177024/200770 (executing program) 2025/08/29 13:17:07 fetching corpus: 6649, signal 177398/200770 (executing program) 2025/08/29 13:17:07 fetching corpus: 6699, signal 177728/200782 (executing program) 2025/08/29 13:17:07 fetching corpus: 6749, signal 178061/200785 (executing program) 2025/08/29 13:17:07 fetching corpus: 6799, signal 178386/200808 (executing program) 2025/08/29 13:17:07 fetching corpus: 6849, signal 178761/200818 (executing program) 2025/08/29 13:17:07 fetching corpus: 6899, signal 179125/200833 (executing program) 2025/08/29 13:17:07 fetching corpus: 6949, signal 179382/200838 (executing program) 2025/08/29 13:17:07 fetching corpus: 6999, signal 179776/200843 (executing program) 2025/08/29 13:17:08 fetching corpus: 7049, signal 180068/200845 (executing program) 2025/08/29 13:17:08 fetching corpus: 7099, signal 180485/200899 (executing program) 2025/08/29 13:17:08 fetching corpus: 7149, signal 180922/200910 (executing program) 2025/08/29 13:17:08 fetching corpus: 7199, signal 181291/200929 (executing program) 2025/08/29 13:17:08 fetching corpus: 7249, signal 181575/200930 (executing program) 2025/08/29 13:17:08 fetching corpus: 7299, signal 181948/200930 (executing program) 2025/08/29 13:17:08 fetching corpus: 7349, signal 182231/200935 (executing program) 2025/08/29 13:17:08 fetching corpus: 7399, signal 182524/200941 (executing program) 2025/08/29 13:17:08 fetching corpus: 7449, signal 182810/200941 (executing program) 2025/08/29 13:17:08 fetching corpus: 7499, signal 183071/200942 (executing program) 2025/08/29 13:17:08 fetching corpus: 7549, signal 183587/200946 (executing program) 2025/08/29 13:17:09 fetching corpus: 7599, signal 183921/200946 (executing program) 2025/08/29 13:17:09 fetching corpus: 7649, signal 184206/200961 (executing program) 2025/08/29 13:17:09 fetching corpus: 7699, signal 184526/200961 (executing program) 2025/08/29 13:17:09 fetching corpus: 7749, signal 184846/201025 (executing program) 2025/08/29 13:17:09 fetching corpus: 7799, signal 185209/201029 (executing program) 2025/08/29 13:17:09 fetching corpus: 7849, signal 185474/201034 (executing program) 2025/08/29 13:17:09 fetching corpus: 7899, signal 185841/201045 (executing program) 2025/08/29 13:17:09 fetching corpus: 7949, signal 186120/201072 (executing program) 2025/08/29 13:17:09 fetching corpus: 7999, signal 186538/201084 (executing program) 2025/08/29 13:17:09 fetching corpus: 8049, signal 186768/201091 (executing program) 2025/08/29 13:17:09 fetching corpus: 8099, signal 186994/201092 (executing program) 2025/08/29 13:17:10 fetching corpus: 8149, signal 187288/201096 (executing program) 2025/08/29 13:17:10 fetching corpus: 8199, signal 187437/201097 (executing program) 2025/08/29 13:17:10 fetching corpus: 8249, signal 188145/201098 (executing program) 2025/08/29 13:17:10 fetching corpus: 8299, signal 188379/201118 (executing program) 2025/08/29 13:17:10 fetching corpus: 8349, signal 188636/201120 (executing program) 2025/08/29 13:17:10 fetching corpus: 8399, signal 188871/201126 (executing program) 2025/08/29 13:17:10 fetching corpus: 8449, signal 189121/201159 (executing program) 2025/08/29 13:17:10 fetching corpus: 8499, signal 189381/201172 (executing program) 2025/08/29 13:17:10 fetching corpus: 8549, signal 189589/201213 (executing program) 2025/08/29 13:17:10 fetching corpus: 8599, signal 189859/201229 (executing program) 2025/08/29 13:17:10 fetching corpus: 8649, signal 190095/201232 (executing program) 2025/08/29 13:17:10 fetching corpus: 8699, signal 190304/201233 (executing program) 2025/08/29 13:17:10 fetching corpus: 8749, signal 190585/201242 (executing program) 2025/08/29 13:17:11 fetching corpus: 8798, signal 190857/201258 (executing program) 2025/08/29 13:17:11 fetching corpus: 8848, signal 191026/201268 (executing program) 2025/08/29 13:17:11 fetching corpus: 8898, signal 191224/201271 (executing program) 2025/08/29 13:17:11 fetching corpus: 8948, signal 191429/201280 (executing program) 2025/08/29 13:17:11 fetching corpus: 8998, signal 191678/201288 (executing program) 2025/08/29 13:17:11 fetching corpus: 9048, signal 191877/201292 (executing program) 2025/08/29 13:17:11 fetching corpus: 9098, signal 192107/201294 (executing program) 2025/08/29 13:17:11 fetching corpus: 9148, signal 192351/201294 (executing program) 2025/08/29 13:17:11 fetching corpus: 9198, signal 192644/201309 (executing program) 2025/08/29 13:17:11 fetching corpus: 9248, signal 192918/201314 (executing program) 2025/08/29 13:17:11 fetching corpus: 9298, signal 193372/201314 (executing program) 2025/08/29 13:17:11 fetching corpus: 9348, signal 193597/201317 (executing program) 2025/08/29 13:17:11 fetching corpus: 9398, signal 193876/201320 (executing program) 2025/08/29 13:17:11 fetching corpus: 9448, signal 194073/201322 (executing program) 2025/08/29 13:17:12 fetching corpus: 9498, signal 194294/201338 (executing program) 2025/08/29 13:17:12 fetching corpus: 9548, signal 194556/201345 (executing program) 2025/08/29 13:17:12 fetching corpus: 9598, signal 194856/201351 (executing program) 2025/08/29 13:17:12 fetching corpus: 9648, signal 195024/201368 (executing program) 2025/08/29 13:17:12 fetching corpus: 9698, signal 195239/201370 (executing program) 2025/08/29 13:17:12 fetching corpus: 9748, signal 195500/201373 (executing program) 2025/08/29 13:17:12 fetching corpus: 9798, signal 195694/201374 (executing program) 2025/08/29 13:17:12 fetching corpus: 9848, signal 195865/201377 (executing program) 2025/08/29 13:17:12 fetching corpus: 9898, signal 196065/201387 (executing program) 2025/08/29 13:17:12 fetching corpus: 9948, signal 196222/201387 (executing program) 2025/08/29 13:17:12 fetching corpus: 9998, signal 196413/201394 (executing program) 2025/08/29 13:17:12 fetching corpus: 10048, signal 196568/201409 (executing program) 2025/08/29 13:17:12 fetching corpus: 10098, signal 196693/201411 (executing program) 2025/08/29 13:17:12 fetching corpus: 10148, signal 196977/201422 (executing program) 2025/08/29 13:17:13 fetching corpus: 10198, signal 197162/201428 (executing program) 2025/08/29 13:17:13 fetching corpus: 10246, signal 197353/201428 (executing program) 2025/08/29 13:17:13 fetching corpus: 10246, signal 197353/201428 (executing program) 2025/08/29 13:17:15 starting 8 fuzzer processes 13:17:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_INO32_GEN={0x8}, 0x0) 13:17:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 13:17:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0xf00) 13:17:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) 13:17:15 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5312) recvfrom$inet(r0, &(0x7f0000000280)=""/152, 0x98, 0x103, &(0x7f0000000340)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) setgroups(0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/10, &(0x7f0000000100)=0xa) recvfrom$inet6(r1, &(0x7f0000000140)=""/133, 0x85, 0x40002001, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @loopback}, 0x1c) getgroups(0x1, &(0x7f0000000000)=[0x0]) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @local, 0xd503}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) 13:17:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x24, &(0x7f0000000140), 0x4) 13:17:15 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 13:17:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%{\x9b\x00') [ 79.106993] audit: type=1400 audit(1756473435.200:7): avc: denied { execmem } for pid=276 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 80.447424] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.449550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.456852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.458373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.460753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.467467] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.469621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.471524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.472944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.474310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.476128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.478100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.481943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.485735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.492423] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.497331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.502985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.510530] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.513246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.514689] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.514789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.519457] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.521642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.534586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.539554] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.543401] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.546404] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.548863] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.553911] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.556035] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.558900] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.559772] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.561128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.565427] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.567275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.569510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.590701] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.593504] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.597090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.607958] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.540644] Bluetooth: hci0: command tx timeout [ 82.604379] Bluetooth: hci1: command tx timeout [ 82.605292] Bluetooth: hci7: command tx timeout [ 82.606475] Bluetooth: hci3: command tx timeout [ 82.606661] Bluetooth: hci2: command tx timeout [ 82.668586] Bluetooth: hci5: command tx timeout [ 82.668601] Bluetooth: hci6: command tx timeout [ 82.668855] Bluetooth: hci4: command tx timeout [ 84.589250] Bluetooth: hci0: command tx timeout [ 84.652285] Bluetooth: hci7: command tx timeout [ 84.652800] Bluetooth: hci1: command tx timeout [ 84.653217] Bluetooth: hci2: command tx timeout [ 84.653598] Bluetooth: hci3: command tx timeout [ 84.716249] Bluetooth: hci5: command tx timeout [ 84.717270] Bluetooth: hci4: command tx timeout [ 84.717660] Bluetooth: hci6: command tx timeout [ 86.637233] Bluetooth: hci0: command tx timeout [ 86.701267] Bluetooth: hci3: command tx timeout [ 86.701669] Bluetooth: hci2: command tx timeout [ 86.702023] Bluetooth: hci1: command tx timeout [ 86.703032] Bluetooth: hci7: command tx timeout [ 86.764236] Bluetooth: hci6: command tx timeout [ 86.764632] Bluetooth: hci4: command tx timeout [ 86.764802] Bluetooth: hci5: command tx timeout [ 88.684293] Bluetooth: hci0: command tx timeout [ 88.750211] Bluetooth: hci1: command tx timeout [ 88.750595] Bluetooth: hci2: command tx timeout [ 88.750677] Bluetooth: hci7: command tx timeout [ 88.750949] Bluetooth: hci3: command tx timeout [ 88.812236] Bluetooth: hci5: command tx timeout [ 88.814232] Bluetooth: hci6: command tx timeout [ 88.814603] Bluetooth: hci4: command tx timeout [ 117.582617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.584212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.903655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.904747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.157314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.157912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.307240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.307821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:17:54 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5312) recvfrom$inet(r0, &(0x7f0000000280)=""/152, 0x98, 0x103, &(0x7f0000000340)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) setgroups(0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/10, &(0x7f0000000100)=0xa) recvfrom$inet6(r1, &(0x7f0000000140)=""/133, 0x85, 0x40002001, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @loopback}, 0x1c) getgroups(0x1, &(0x7f0000000000)=[0x0]) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @local, 0xd503}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) 13:17:54 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5312) recvfrom$inet(r0, &(0x7f0000000280)=""/152, 0x98, 0x103, &(0x7f0000000340)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) setgroups(0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/10, &(0x7f0000000100)=0xa) recvfrom$inet6(r1, &(0x7f0000000140)=""/133, 0x85, 0x40002001, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @loopback}, 0x1c) getgroups(0x1, &(0x7f0000000000)=[0x0]) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @local, 0xd503}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) 13:17:54 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5312) recvfrom$inet(r0, &(0x7f0000000280)=""/152, 0x98, 0x103, &(0x7f0000000340)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) setgroups(0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/10, &(0x7f0000000100)=0xa) recvfrom$inet6(r1, &(0x7f0000000140)=""/133, 0x85, 0x40002001, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @loopback}, 0x1c) getgroups(0x1, &(0x7f0000000000)=[0x0]) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @local, 0xd503}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) [ 118.747823] audit: type=1400 audit(1756473474.839:8): avc: denied { open } for pid=3818 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.759445] audit: type=1400 audit(1756473474.840:9): avc: denied { kernel } for pid=3818 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:17:54 executing program 5: process_vm_writev(0x0, &(0x7f0000001440)=[{0x0}, {&(0x7f0000000040)=""/141, 0x8d}], 0x2, &(0x7f0000001980)=[{0x0}], 0x1, 0x0) 13:17:54 executing program 7: pkey_free(0xffffffffffffffff) 13:17:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x0) mmap(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x0, 0x11, r0, 0x0) mbind(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000180)=0x3, 0x7, 0x0) 13:17:55 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) [ 119.142233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.142816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:17:55 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) [ 119.368055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.369494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.573758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.574867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.681554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.682656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.762259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.762834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.946356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.947468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.952015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.952622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.041962] audit: type=1400 audit(1756473476.134:10): avc: denied { write } for pid=3890 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.062621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.063152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.256047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.256711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.357474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.358038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.698732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.699376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.728115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.728706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:17:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4b, &(0x7f0000000140)) 13:17:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev}, 0x10, 0x0}}], 0x1, 0x8000) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 13:17:56 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) 13:17:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x24, &(0x7f0000000140), 0x4) 13:17:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%{\x9b\x00') 13:17:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3b00000002000000c4ff"]}) 13:17:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x31, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) 13:17:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 13:17:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, "cc64134bec250a95"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) 13:17:57 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) 13:17:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x24, &(0x7f0000000140), 0x4) 13:17:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x5, 0x0, 0x8}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:17:57 executing program 2: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffe000/0x1000)=nil) 13:17:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 13:17:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)={[], [], 0x2}) 13:17:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%{\x9b\x00') 13:17:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 13:17:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f0000000000)={0x34, 0x75, 0x0, {0xfffffffffffffeb3, "cc23123dc0c25183252923d7db0709000000000000006943ef51f410e478eb2135717a2296aff1fd26"}}, 0x34) 13:17:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, "cc64134bec250a95"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) 13:17:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000022c0)={0x2, &(0x7f0000002280)=[{0x40}, {0x6}]}) 13:17:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x24, &(0x7f0000000140), 0x4) 13:17:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) 13:17:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x0) 13:17:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, "cc64134bec250a95"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) 13:17:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001d3"], 0x28}], 0x1}, 0x0) close(r0) 13:17:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%{\x9b\x00') 13:17:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f0000000000)={0x34, 0x75, 0x0, {0xfffffffffffffeb3, "cc23123dc0c25183252923d7db0709000000000000006943ef51f410e478eb2135717a2296aff1fd26"}}, 0x34) 13:17:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 13:17:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) [ 121.280342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 121.285872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:17:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x20) 13:17:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001d3"], 0x28}], 0x1}, 0x0) close(r0) 13:17:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, "cc64134bec250a95"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) [ 121.340888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:17:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f0000000000)={0x34, 0x75, 0x0, {0xfffffffffffffeb3, "cc23123dc0c25183252923d7db0709000000000000006943ef51f410e478eb2135717a2296aff1fd26"}}, 0x34) 13:17:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x20) 13:17:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f0000000200)=""/183, 0xb7, 0x0) 13:17:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001d3"], 0x28}], 0x1}, 0x0) close(r0) 13:17:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 13:17:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x0) 13:17:57 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 13:17:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) [ 121.460078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:17:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f0000000000)={0x34, 0x75, 0x0, {0xfffffffffffffeb3, "cc23123dc0c25183252923d7db0709000000000000006943ef51f410e478eb2135717a2296aff1fd26"}}, 0x34) 13:17:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x20) 13:17:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) 13:17:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001d3"], 0x28}], 0x1}, 0x0) close(r0) 13:17:57 executing program 1: r0 = getpgid(0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x0, 0x0, &(0x7f0000000080)) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:17:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f0000000200)=""/183, 0xb7, 0x0) 13:17:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x0) 13:17:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) [ 121.646881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:17:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x0) 13:17:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x20) 13:17:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f0000000200)=""/183, 0xb7, 0x0) 13:17:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 13:17:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 13:17:57 executing program 5: epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x8) 13:17:57 executing program 0: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001540)="a8", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 13:17:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x20}}], 0x2, 0x0) 13:17:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 13:17:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x2b}, 0xa, @in=@broadcast}}, 0xe8) 13:17:57 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) 13:17:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) [ 121.891702] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 13:17:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 13:17:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 13:17:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x22, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\x00']}, 0x14}], 0x1}, 0x0) 13:17:58 executing program 5: syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13:17:58 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x31f, 0x0) 13:17:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f0000000200)=""/183, 0xb7, 0x0) 13:17:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 13:17:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 13:17:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 13:17:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 13:17:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 13:17:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 13:17:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 13:17:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 13:17:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 13:17:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 13:17:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x10000, 0x1}, 0x20) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 13:17:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 13:17:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 13:17:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 13:17:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 13:17:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x9, r1, r0) 13:17:58 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) 13:17:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') fsetxattr$security_selinux(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 13:17:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/icmp\x00') pread64(r0, &(0x7f0000000000)=""/107, 0x6b, 0x400) 13:17:58 executing program 3: ioperm(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) syncfs(r0) 13:17:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/icmp\x00') pread64(r0, &(0x7f0000000000)=""/107, 0x6b, 0x400) 13:17:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x800) 13:17:58 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 13:17:59 executing program 7: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) close(r0) 13:17:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') fsetxattr$security_selinux(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 13:17:59 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/icmp\x00') pread64(r0, &(0x7f0000000000)=""/107, 0x6b, 0x400) 13:17:59 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 13:17:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x48, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 13:17:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x9, r1, r0) 13:17:59 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0xffffffffffffffe1}, 0x0) 13:17:59 executing program 2: ioprio_set$pid(0x2, 0x0, 0x2004) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) 13:17:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x48, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 13:17:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') fsetxattr$security_selinux(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 13:17:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/4096) 13:17:59 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/icmp\x00') pread64(r0, &(0x7f0000000000)=""/107, 0x6b, 0x400) 13:17:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x9, r1, r0) [ 123.106404] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 123.107268] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 123.107821] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 123.108364] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 123.108975] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 1 [ 123.117533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.118061] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 123.118764] Buffer I/O error on dev sr0, logical block 0, async page read [ 123.129467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.129908] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 123.130744] Buffer I/O error on dev sr0, logical block 1, async page read 13:17:59 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 123.147494] loop3: detected capacity change from 0 to 512 [ 123.151034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.151745] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 123.152649] Buffer I/O error on dev sr0, logical block 2, async page read [ 123.168320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.168829] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 123.169618] Buffer I/O error on dev sr0, logical block 3, async page read [ 123.180313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.180813] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 123.181795] Buffer I/O error on dev sr0, logical block 4, async page read 13:17:59 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000001180)={{0x2, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) [ 123.190038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:17:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') fsetxattr$security_selinux(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) [ 123.204517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.204976] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 123.205657] Buffer I/O error on dev sr0, logical block 5, async page read [ 123.219968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.220586] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 123.221388] Buffer I/O error on dev sr0, logical block 6, async page read [ 123.231061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.231604] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 123.232318] Buffer I/O error on dev sr0, logical block 7, async page read [ 123.244611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.246684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.247334] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 123.248037] Buffer I/O error on dev sr0, logical block 0, async page read [ 123.271384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.271908] Buffer I/O error on dev sr0, logical block 1, async page read [ 123.280811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.286441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.287011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.293148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.295765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 123.299284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 13:18:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x48, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 13:18:00 executing program 2: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 13:18:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x9, r1, r0) 13:18:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/4096) 13:18:00 executing program 7: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) close(r0) 13:18:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/4096) 13:18:00 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000000)={0x414001}, 0x18) 13:18:00 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 124.119988] loop3: detected capacity change from 0 to 512 13:18:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x48, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) [ 124.125073] loop1: detected capacity change from 0 to 512 [ 124.147498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:18:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) [ 124.161143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:18:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001780)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001600)="f5afb6122267", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:18:00 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 13:18:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/4096) [ 124.253856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:18:00 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000000)={0x414001}, 0x18) 13:18:00 executing program 7: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) close(r0) [ 124.279155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.280610] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 124.294013] loop3: detected capacity change from 0 to 512 [ 124.306440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.337384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:18:00 executing program 7: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) close(r0) 13:18:00 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7002, 0x0) 13:18:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/4096) 13:18:00 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000100)=@chain) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r1, 0x0) 13:18:00 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x3}, 'port1\x00'}) 13:18:00 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000000)={0x414001}, 0x18) 13:18:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/4096) [ 124.477810] loop3: detected capacity change from 0 to 512 [ 124.486109] loop1: detected capacity change from 0 to 512 [ 124.510698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.514765] ------------[ cut here ]------------ [ 124.515544] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.5/284 [ 124.516414] Modules linked in: [ 124.516824] CPU: 1 UID: 0 PID: 284 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 124.518875] Tainted: [W]=WARN [ 124.519430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.520799] RIP: 0010:mntput_no_expire+0x78e/0xbe0 [ 124.521608] Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b [ 124.525073] RSP: 0018:ffff888017ba7ce0 EFLAGS: 00010293 [ 124.526208] RAX: 0000000000000000 RBX: 1ffff11002f74fa1 RCX: ffffffff81bf96d3 [ 124.526779] RDX: ffff88800a72d280 RSI: ffffffff81bf96dd RDI: 0000000000000005 [ 124.527382] RBP: ffff88801f04a380 R08: 0000000000000001 R09: 0000000000000000 [ 124.527954] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff888017ba7d48 [ 124.528547] R13: 00000000ffffffff R14: ffff88801f04a380 R15: ffff88801f04a468 [ 124.529134] FS: 0000555557707400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 124.529800] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.530288] CR2: 00007ffef75bee78 CR3: 000000003eddd000 CR4: 0000000000350ef0 [ 124.530855] Call Trace: [ 124.531068] [ 124.531277] ? __pfx_mntput_no_expire+0x10/0x10 [ 124.531666] ? dput.part.0+0xce/0x930 [ 124.531991] ? lock_release+0xc8/0x290 [ 124.532339] path_umount+0x6e0/0x1100 [ 124.532738] ? kmem_cache_free+0x2a1/0x540 [ 124.533093] ? __pfx_path_umount+0x10/0x10 [ 124.533509] ? putname.part.0+0x11b/0x160 [ 124.533857] __x64_sys_umount+0x15c/0x190 [ 124.534216] ? __pfx___x64_sys_umount+0x10/0x10 [ 124.534600] ? trace_csd_function_exit+0x134/0x190 [ 124.535013] ? __flush_smp_call_function_queue+0x40f/0x740 [ 124.535496] do_syscall_64+0xbf/0x360 [ 124.535811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.536251] RIP: 0033:0x7f7809980f87 [ 124.536559] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.538044] RSP: 002b:00007fffefb5e158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.538679] RAX: ffffffffffffffda RBX: 000000000000003b RCX: 00007f7809980f87 [ 124.539267] RDX: 00007fffefb5e22a RSI: 000000000000000a RDI: 00007fffefb5e220 [ 124.539838] RBP: 00007fffefb5e220 R08: 00000000ffffffff R09: 00007fffefb5dff0 [ 124.540431] R10: 0000555557708c7b R11: 0000000000000246 R12: 00007f78099d9105 [ 124.541005] R13: 00007fffefb5f2e0 R14: 0000555557708c20 R15: 00007fffefb5f320 [ 124.541606] [ 124.541805] irq event stamp: 256093 [ 124.542095] hardirqs last enabled at (256101): [] __up_console_sem+0x78/0x80 [ 124.542799] hardirqs last disabled at (256110): [] __up_console_sem+0x5d/0x80 [ 124.543496] softirqs last enabled at (255816): [] handle_softirqs+0x50c/0x770 [ 124.544207] softirqs last disabled at (255803): [] __irq_exit_rcu+0xc4/0x100 [ 124.544886] ---[ end trace 0000000000000000 ]--- [ 124.555360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:18:00 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000000)={0x414001}, 0x18) 13:18:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10b302, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 13:18:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000080)) 13:18:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x0) [ 124.625023] audit: type=1400 audit(1756473480.718:11): avc: denied { watch } for pid=4257 comm="syz-executor.0" path="/proc/4257/task" dev="proc" ino=6196 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 124.642819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:18:00 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7002, 0x0) 13:18:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/4096) [ 124.644622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:18:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 124.690231] loop1: detected capacity change from 0 to 512 [ 124.701746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.721668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:18:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000080)) 13:18:00 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7002, 0x0) 13:18:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x0) 13:18:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000080)) 13:18:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x0) 13:18:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10b302, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 13:18:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() pidfd_open(r0, 0x0) 13:18:00 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7002, 0x0) 13:18:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000080)) 13:18:01 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10b302, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 13:18:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') pread64(r0, &(0x7f0000000140)=""/154, 0x9a, 0x4) 13:18:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x0) 13:18:01 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10b302, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 13:18:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x4}, 0x6) 13:18:01 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capget(&(0x7f0000000000)={0x20071026}, 0x0) 13:18:01 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=' ', 0x1}], 0x1, 0x0, 0x0, 0x0) 13:18:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x0) 13:18:01 executing program 1: r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\x00', 0x0, 0x0) 13:18:01 executing program 6: modify_ldt$write(0x3, 0x0, 0x0) 13:18:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x0) 13:18:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 13:18:01 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=' ', 0x1}], 0x1, 0x0, 0x0, 0x0) 13:18:01 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x4400}, 0x1c) 13:18:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 13:18:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp={0x2}, @timestamp, @mss, @sack_perm, @sack_perm, @sack_perm, @timestamp, @window], 0x8) 13:18:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000240)=[0x400, 0x0, 0x0], &(0x7f0000000280), 0x0) 13:18:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x0) 13:18:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x0, @private}, {0x6, @local}, 0x2, {0x2, 0x0, @multicast1}, 'syz_tun\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @broadcast}, 0x70, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='lo\x00', 0xffff, 0x4, 0x9}) 13:18:01 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000000080)='J', 0x1}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13:18:01 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 13:18:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 13:18:01 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=' ', 0x1}], 0x1, 0x0, 0x0, 0x0) 13:18:01 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/90, 0x5a, 0x800) 13:18:01 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 13:18:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 13:18:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8d8f0c322bffe58557009febbfed69a1a6ba88"}) ioctl$TCXONC(r0, 0x540a, 0x2) 13:18:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000240)=[0x400, 0x0, 0x0], &(0x7f0000000280), 0x0) 13:18:01 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 13:18:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x0, @private}, {0x6, @local}, 0x2, {0x2, 0x0, @multicast1}, 'syz_tun\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @broadcast}, 0x70, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='lo\x00', 0xffff, 0x4, 0x9}) 13:18:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8d8f0c322bffe58557009febbfed69a1a6ba88"}) ioctl$TCXONC(r0, 0x540a, 0x2) 13:18:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 13:18:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') pread64(r0, 0x0, 0x0, 0x0) 13:18:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000240)=[0x400, 0x0, 0x0], &(0x7f0000000280), 0x0) 13:18:01 executing program 3: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13:18:01 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=' ', 0x1}], 0x1, 0x0, 0x0, 0x0) 13:18:01 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 13:18:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 13:18:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x0, @private}, {0x6, @local}, 0x2, {0x2, 0x0, @multicast1}, 'syz_tun\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @broadcast}, 0x70, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='lo\x00', 0xffff, 0x4, 0x9}) 13:18:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8d8f0c322bffe58557009febbfed69a1a6ba88"}) ioctl$TCXONC(r0, 0x540a, 0x2) 13:18:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x0, @private}, {0x6, @local}, 0x2, {0x2, 0x0, @multicast1}, 'syz_tun\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @broadcast}, 0x70, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='lo\x00', 0xffff, 0x4, 0x9}) 13:18:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) 13:18:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000240)=[0x400, 0x0, 0x0], &(0x7f0000000280), 0x0) 13:18:01 executing program 6: socketpair(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x14}, 0x14}}, 0x0) 13:18:01 executing program 7: semop(0x0, &(0x7f0000000540)=[{0x2, 0x1, 0x1800}, {}], 0x2) 13:18:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000046c0)) 13:18:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x0, @private}, {0x6, @local}, 0x2, {0x2, 0x0, @multicast1}, 'syz_tun\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @broadcast}, 0x70, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='lo\x00', 0xffff, 0x4, 0x9}) 13:18:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x0, @private}, {0x6, @local}, 0x2, {0x2, 0x0, @multicast1}, 'syz_tun\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @broadcast}, 0x70, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='lo\x00', 0xffff, 0x4, 0x9}) 13:18:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8d8f0c322bffe58557009febbfed69a1a6ba88"}) ioctl$TCXONC(r0, 0x540a, 0x2) 13:18:01 executing program 7: setresuid(0xee01, 0xee00, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:18:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) 13:18:01 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_ts_info}) 13:18:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001480)) 13:18:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x0, @private}, {0x6, @local}, 0x2, {0x2, 0x0, @multicast1}, 'syz_tun\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @broadcast}, 0x70, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='lo\x00', 0xffff, 0x4, 0x9}) 13:18:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000046c0)) 13:18:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:18:01 executing program 7: setresuid(0xee01, 0xee00, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:18:01 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_ts_info}) 13:18:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) 13:18:01 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x2) 13:18:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x3000)=nil) 13:18:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @timestamp, @mss, @sack_perm, @timestamp, @mss, @mss={0x2, 0x9}, @sack_perm], 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 13:18:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000046c0)) 13:18:01 executing program 7: setresuid(0xee01, 0xee00, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:18:01 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_ts_info}) 13:18:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001480)) 13:18:02 executing program 7: setresuid(0xee01, 0xee00, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:18:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) 13:18:02 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001480)) 13:18:02 executing program 4: futex(&(0x7f0000000040), 0x7, 0x0, 0x0, 0x0, 0x0) 13:18:02 executing program 5: pwritev2(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000140)="1b", 0x1}, {&(0x7f0000000180)}], 0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x65021, &(0x7f0000000180)=[{&(0x7f0000000080)="82", 0x1}]) 13:18:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000046c0)) 13:18:02 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_ts_info}) 13:18:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @timestamp, @mss, @sack_perm, @timestamp, @mss, @mss={0x2, 0x9}, @sack_perm], 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 13:18:02 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_WOL_MODES={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "48d203e7a5451c196e"}]}]}, 0x44}}, 0x0) 13:18:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000003080)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001680)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 13:18:02 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @private, @random="645b467e8bd0", @rand_addr=0x7f000000}}}}, 0x0) 13:18:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port0\x00'}) 13:18:02 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2}]) 13:18:02 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'osx.', '(/\'\\\x00'}, 0x0, 0x0, 0x0) 13:18:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @timestamp, @mss, @sack_perm, @timestamp, @mss, @mss={0x2, 0x9}, @sack_perm], 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 13:18:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)=0xe) 13:18:02 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001480)) 13:18:02 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 13:18:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @fixed}, 0xe) 13:18:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @timestamp, @mss, @sack_perm, @timestamp, @mss, @mss={0x2, 0x9}, @sack_perm], 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 13:18:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x2e}]) 13:18:03 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @source_quench={0x3, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private}}}}}}, 0x0) 13:18:03 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = inotify_init() poll(&(0x7f0000000080)=[{r0}, {r0}, {r0}, {r1}, {r0}, {r2}], 0x6, 0x1) 13:18:03 executing program 4: r0 = epoll_create(0x2b) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x4, r0, &(0x7f0000000000)) 13:18:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='nonumtail']) 13:18:03 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 13:18:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port0\x00'}) 13:18:03 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}}], 0x18) [ 127.058014] No source specified 13:18:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f0000000180)=[{r0, 0x82}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) [ 127.064144] No source specified 13:18:03 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = inotify_init() poll(&(0x7f0000000080)=[{r0}, {r0}, {r0}, {r1}, {r0}, {r2}], 0x6, 0x1) 13:18:03 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @broadcast}, @address_request}}}}, 0x0) 13:18:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port0\x00'}) 13:18:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='nonumtail']) 13:18:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 127.162068] No source specified 13:18:03 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = inotify_init() poll(&(0x7f0000000080)=[{r0}, {r0}, {r0}, {r1}, {r0}, {r2}], 0x6, 0x1) 13:18:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @dev}, {0x0, 0x4620, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 13:18:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='nonumtail']) 13:18:03 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = inotify_init() poll(&(0x7f0000000080)=[{r0}, {r0}, {r0}, {r1}, {r0}, {r2}], 0x6, 0x1) 13:18:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_thread_area(0x0) 13:18:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port0\x00'}) 13:18:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0x3, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x1d, 0x0, 0x0, @uid=0xee01}]}]}, 0x28}], 0x1}, 0x0) 13:18:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000180)) 13:18:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:03 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}}], 0x18) [ 127.391118] No source specified 13:18:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='nonumtail']) 13:18:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000040)=@proc, 0xb) 13:18:03 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @remote, r2}, 0xc) [ 127.489981] No source specified 13:18:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 13:18:03 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f000000a040), 0x0, 0x0) 13:18:03 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}}], 0x18) 13:18:03 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 13:18:03 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x24, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) msgrcv(0x0, 0x0, 0xe9, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 13:18:03 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r0, &(0x7f0000001280)=""/4063, 0xfdf, 0x0) 13:18:03 executing program 4: r0 = getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 13:18:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:18:03 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}}], 0x18) [ 127.655472] loop7: detected capacity change from 0 to 6 [ 127.671106] FAT-fs (loop7): Directory bread(block 6) failed [ 127.671775] FAT-fs (loop7): Directory bread(block 7) failed [ 127.675304] FAT-fs (loop7): Directory bread(block 8) failed [ 127.675781] FAT-fs (loop7): Directory bread(block 9) failed [ 127.683947] FAT-fs (loop7): Directory bread(block 6) failed [ 127.684507] FAT-fs (loop7): Directory bread(block 7) failed [ 127.684990] FAT-fs (loop7): Directory bread(block 8) failed [ 127.690495] FAT-fs (loop7): Directory bread(block 9) failed [ 127.691418] FAT-fs (loop7): Directory bread(block 6) failed [ 127.698567] FAT-fs (loop7): Directory bread(block 7) failed 13:18:03 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2, @loopback}}}}}}, 0x0) 13:18:03 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r0, &(0x7f0000001280)=""/4063, 0xfdf, 0x0) [ 127.715760] kmemleak: Found object by alias at 0x607f1a638208 [ 127.715776] CPU: 1 UID: 0 PID: 4557 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 127.715795] Tainted: [W]=WARN [ 127.715799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.715806] Call Trace: [ 127.715810] [ 127.715815] dump_stack_lvl+0xca/0x120 [ 127.715841] __lookup_object+0x94/0xb0 [ 127.715858] delete_object_full+0x27/0x70 [ 127.715875] free_percpu+0x30/0x1160 [ 127.715892] ? arch_uprobe_clear_state+0x16/0x140 [ 127.715913] futex_hash_free+0x38/0xc0 [ 127.715929] mmput+0x2d3/0x390 [ 127.715948] do_exit+0x79d/0x2970 [ 127.715966] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 127.715987] ? __pfx_do_exit+0x10/0x10 [ 127.716002] ? find_held_lock+0x2b/0x80 [ 127.716020] ? get_signal+0x835/0x2340 [ 127.716042] do_group_exit+0xd3/0x2a0 [ 127.716058] get_signal+0x2315/0x2340 [ 127.716082] ? __pfx_get_signal+0x10/0x10 [ 127.716098] ? do_futex+0x135/0x370 [ 127.716113] ? __pfx_do_futex+0x10/0x10 [ 127.716129] arch_do_signal_or_restart+0x80/0x790 [ 127.716148] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 127.716164] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 127.716190] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 127.716209] ? __pfx___x64_sys_futex+0x10/0x10 [ 127.716230] exit_to_user_mode_loop+0x8b/0x110 [ 127.716244] do_syscall_64+0x2f7/0x360 [ 127.716257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.716269] RIP: 0033:0x7fd4a2c12b19 [ 127.716278] Code: Unable to access opcode bytes at 0x7fd4a2c12aef. [ 127.716284] RSP: 002b:00007fd4a0188218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.716295] RAX: fffffffffffffe00 RBX: 00007fd4a2d25f68 RCX: 00007fd4a2c12b19 [ 127.716303] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4a2d25f68 [ 127.716310] RBP: 00007fd4a2d25f60 R08: 0000000000000000 R09: 0000000000000000 [ 127.716317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4a2d25f6c [ 127.716324] R13: 00007ffeff8b95ef R14: 00007fd4a0188300 R15: 0000000000022000 [ 127.716343] [ 127.716347] kmemleak: Object (percpu) 0x607f1a638204 (size 8): [ 127.716353] kmemleak: comm "syz-executor.7", pid 4556, jiffies 4294794515 [ 127.716360] kmemleak: min_count = 1 [ 127.716364] kmemleak: count = 0 [ 127.716368] kmemleak: flags = 0x21 [ 127.716371] kmemleak: checksum = 0 [ 127.716375] kmemleak: backtrace: [ 127.716379] pcpu_alloc_noprof+0x87a/0x1170 [ 127.716393] alloc_vfsmnt+0x135/0x6e0 [ 127.716407] vfs_create_mount.part.0+0x40/0x440 [ 127.716421] path_mount+0x1637/0x1dd0 [ 127.716433] __x64_sys_mount+0x27b/0x300 [ 127.716444] do_syscall_64+0xbf/0x360 [ 127.716452] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:18:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="12fdad85f18c", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:18:04 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x24, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) msgrcv(0x0, 0x0, 0xe9, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 13:18:04 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x24, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) msgrcv(0x0, 0x0, 0xe9, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 13:18:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 13:18:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) [ 128.181164] loop7: detected capacity change from 0 to 6 [ 128.185960] loop2: detected capacity change from 0 to 6 [ 128.187698] FAT-fs (loop7): Directory bread(block 6) failed [ 128.188218] FAT-fs (loop7): Directory bread(block 7) failed [ 128.189165] FAT-fs (loop7): Directory bread(block 8) failed [ 128.191108] FAT-fs (loop7): Directory bread(block 9) failed [ 128.200680] FAT-fs (loop7): Directory bread(block 6) failed [ 128.201239] FAT-fs (loop7): Directory bread(block 7) failed [ 128.201760] FAT-fs (loop7): Directory bread(block 8) failed [ 128.203912] FAT-fs (loop7): Directory bread(block 9) failed [ 128.204622] FAT-fs (loop7): Directory bread(block 6) failed [ 128.205161] FAT-fs (loop7): Directory bread(block 7) failed [ 128.212064] kmemleak: Found object by alias at 0x607f1a638208 [ 128.212078] CPU: 1 UID: 0 PID: 4572 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 128.212096] Tainted: [W]=WARN [ 128.212100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.212107] Call Trace: [ 128.212112] [ 128.212116] dump_stack_lvl+0xca/0x120 [ 128.212143] __lookup_object+0x94/0xb0 [ 128.212160] delete_object_full+0x27/0x70 [ 128.212182] free_percpu+0x30/0x1160 [ 128.212199] ? arch_uprobe_clear_state+0x16/0x140 [ 128.212220] futex_hash_free+0x38/0xc0 [ 128.212236] mmput+0x2d3/0x390 [ 128.212255] do_exit+0x79d/0x2970 [ 128.212269] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.212291] ? zap_other_threads+0x2b9/0x3a0 [ 128.212309] ? __pfx_do_exit+0x10/0x10 [ 128.212322] ? do_group_exit+0x1c3/0x2a0 [ 128.212338] ? _raw_spin_unlock_irq+0x23/0x40 [ 128.212357] do_group_exit+0xd3/0x2a0 [ 128.212372] __x64_sys_exit_group+0x3e/0x50 [ 128.212386] x64_sys_call+0x18c5/0x18d0 [ 128.212401] do_syscall_64+0xbf/0x360 [ 128.212414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.212426] RIP: 0033:0x7fd4a2c12b19 [ 128.212435] Code: Unable to access opcode bytes at 0x7fd4a2c12aef. [ 128.212440] RSP: 002b:00007ffeff8b9818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 128.212451] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fd4a2c12b19 [ 128.212459] RDX: 00007fd4a2bc572b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 128.212466] RBP: 0000000000000000 R08: 0000001b2d427738 R09: 0000000000000000 [ 128.212473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.212480] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeff8b9900 [ 128.212499] [ 128.212502] kmemleak: Object (percpu) 0x607f1a638204 (size 8): [ 128.212508] kmemleak: comm "syz-executor.7", pid 4578, jiffies 4294795031 [ 128.212515] kmemleak: min_count = 1 [ 128.212519] kmemleak: count = 0 [ 128.212523] kmemleak: flags = 0x21 [ 128.212526] kmemleak: checksum = 0 [ 128.212530] kmemleak: backtrace: [ 128.212534] pcpu_alloc_noprof+0x87a/0x1170 [ 128.212549] alloc_vfsmnt+0x135/0x6e0 [ 128.212563] vfs_create_mount.part.0+0x40/0x440 [ 128.212577] path_mount+0x1637/0x1dd0 [ 128.212589] __x64_sys_mount+0x27b/0x300 [ 128.212600] do_syscall_64+0xbf/0x360 [ 128.212608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.213138] FAT-fs (loop2): Directory bread(block 6) failed [ 128.238319] FAT-fs (loop2): Directory bread(block 7) failed [ 128.241530] FAT-fs (loop2): Directory bread(block 8) failed [ 128.242006] FAT-fs (loop2): Directory bread(block 9) failed [ 128.270112] FAT-fs (loop2): Directory bread(block 6) failed [ 128.271075] FAT-fs (loop2): Directory bread(block 7) failed [ 128.272313] FAT-fs (loop2): Directory bread(block 8) failed [ 128.272835] FAT-fs (loop2): Directory bread(block 9) failed [ 128.274237] FAT-fs (loop2): Directory bread(block 6) failed [ 128.275081] FAT-fs (loop2): Directory bread(block 7) failed [ 128.467897] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.468672] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.472813] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.477719] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.479550] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.482365] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.484038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.489227] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.491675] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.494882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.497708] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.499669] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.507104] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 128.508049] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.509697] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.510986] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 128.511477] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 128.512800] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 128.515604] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 128.516111] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 128.519444] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 128.521714] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 128.524228] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 128.525729] Bluetooth: hci7: Opcode 0x0406 failed: -4 13:18:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 13:18:04 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r0, &(0x7f0000001280)=""/4063, 0xfdf, 0x0) 13:18:04 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x24, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) msgrcv(0x0, 0x0, 0xe9, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 13:18:04 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x24, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) msgrcv(0x0, 0x0, 0xe9, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 13:18:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 13:18:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) [ 128.581329] loop7: detected capacity change from 0 to 6 [ 128.589073] FAT-fs (loop7): Directory bread(block 6) failed [ 128.589690] FAT-fs (loop7): Directory bread(block 7) failed [ 128.591386] FAT-fs (loop7): Directory bread(block 8) failed [ 128.591893] FAT-fs (loop7): Directory bread(block 9) failed [ 128.595427] FAT-fs (loop7): Directory bread(block 6) failed [ 128.595952] FAT-fs (loop7): Directory bread(block 7) failed [ 128.601654] loop2: detected capacity change from 0 to 6 [ 128.603365] FAT-fs (loop7): Directory bread(block 8) failed [ 128.607518] FAT-fs (loop7): Directory bread(block 9) failed [ 128.609205] FAT-fs (loop7): Directory bread(block 6) failed [ 128.610576] FAT-fs (loop7): Directory bread(block 7) failed [ 128.612094] kmemleak: Found object by alias at 0x607f1a638208 [ 128.612109] CPU: 1 UID: 0 PID: 4597 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 128.612131] Tainted: [W]=WARN [ 128.612135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.612142] Call Trace: [ 128.612146] [ 128.612151] dump_stack_lvl+0xca/0x120 [ 128.612179] __lookup_object+0x94/0xb0 [ 128.612197] delete_object_full+0x27/0x70 [ 128.612214] free_percpu+0x30/0x1160 [ 128.612230] ? arch_uprobe_clear_state+0x16/0x140 [ 128.612252] futex_hash_free+0x38/0xc0 [ 128.612267] mmput+0x2d3/0x390 [ 128.612286] do_exit+0x79d/0x2970 [ 128.612303] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.612324] ? __pfx_do_exit+0x10/0x10 [ 128.612339] ? find_held_lock+0x2b/0x80 [ 128.612357] ? get_signal+0x835/0x2340 [ 128.612378] do_group_exit+0xd3/0x2a0 [ 128.612393] get_signal+0x2315/0x2340 [ 128.612410] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 128.612427] ? __pfx_get_signal+0x10/0x10 [ 128.612443] ? do_futex+0x135/0x370 [ 128.612457] ? __pfx_do_futex+0x10/0x10 [ 128.612473] arch_do_signal_or_restart+0x80/0x790 [ 128.612491] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 128.612507] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.612527] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.612546] ? __pfx___x64_sys_futex+0x10/0x10 [ 128.612566] exit_to_user_mode_loop+0x8b/0x110 [ 128.612579] do_syscall_64+0x2f7/0x360 [ 128.612593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.612605] RIP: 0033:0x7fd4a2c12b19 [ 128.612614] Code: Unable to access opcode bytes at 0x7fd4a2c12aef. [ 128.612619] RSP: 002b:00007fd4a0188218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.612630] RAX: fffffffffffffe00 RBX: 00007fd4a2d25f68 RCX: 00007fd4a2c12b19 [ 128.612638] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4a2d25f68 [ 128.612645] RBP: 00007fd4a2d25f60 R08: 0000000000000000 R09: 0000000000000000 [ 128.612652] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4a2d25f6c [ 128.612659] R13: 00007ffeff8b95ef R14: 00007fd4a0188300 R15: 0000000000022000 [ 128.612677] [ 128.612681] kmemleak: Object (percpu) 0x607f1a638204 (size 8): [ 128.612687] kmemleak: comm "syz-executor.7", pid 4594, jiffies 4294795429 [ 128.612694] kmemleak: min_count = 1 [ 128.612698] kmemleak: count = 0 [ 128.612701] kmemleak: flags = 0x21 [ 128.612705] kmemleak: checksum = 0 [ 128.612709] kmemleak: backtrace: [ 128.612713] pcpu_alloc_noprof+0x87a/0x1170 [ 128.612727] alloc_vfsmnt+0x135/0x6e0 [ 128.612741] vfs_create_mount.part.0+0x40/0x440 [ 128.612755] path_mount+0x1637/0x1dd0 [ 128.612767] __x64_sys_mount+0x27b/0x300 [ 128.612778] do_syscall_64+0xbf/0x360 [ 128.612786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.619940] FAT-fs (loop2): Directory bread(block 6) failed 13:18:04 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x24, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) msgrcv(0x0, 0x0, 0xe9, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 13:18:04 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r0, &(0x7f0000001280)=""/4063, 0xfdf, 0x0) [ 128.650656] FAT-fs (loop2): Directory bread(block 7) failed [ 128.651446] FAT-fs (loop2): Directory bread(block 8) failed [ 128.651884] FAT-fs (loop2): Directory bread(block 9) failed [ 128.672294] FAT-fs (loop2): Directory bread(block 6) failed [ 128.672793] FAT-fs (loop2): Directory bread(block 7) failed [ 128.673888] FAT-fs (loop2): Directory bread(block 8) failed [ 128.675952] FAT-fs (loop2): Directory bread(block 9) failed [ 128.677630] FAT-fs (loop2): Directory bread(block 6) failed [ 128.678066] FAT-fs (loop2): Directory bread(block 7) failed 13:18:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 13:18:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:05 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x24, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) msgrcv(0x0, 0x0, 0xe9, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 13:18:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2288, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:18:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 13:18:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) [ 129.378602] loop2: detected capacity change from 0 to 6 [ 129.378836] loop7: detected capacity change from 0 to 6 [ 129.387000] FAT-fs (loop7): Directory bread(block 6) failed [ 129.387595] FAT-fs (loop7): Directory bread(block 7) failed [ 129.389057] FAT-fs (loop7): Directory bread(block 8) failed [ 129.391848] FAT-fs (loop7): Directory bread(block 9) failed [ 129.394003] FAT-fs (loop2): Directory bread(block 6) failed [ 129.394480] FAT-fs (loop2): Directory bread(block 7) failed [ 129.395141] FAT-fs (loop2): Directory bread(block 8) failed [ 129.398829] FAT-fs (loop7): Directory bread(block 6) failed [ 129.399682] FAT-fs (loop7): Directory bread(block 7) failed [ 129.402594] FAT-fs (loop7): Directory bread(block 8) failed [ 129.403059] FAT-fs (loop7): Directory bread(block 9) failed [ 129.403247] FAT-fs (loop2): Directory bread(block 9) failed [ 129.405886] FAT-fs (loop7): Directory bread(block 6) failed [ 129.406409] FAT-fs (loop7): Directory bread(block 7) failed 13:18:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2288, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 129.414329] FAT-fs (loop2): Directory bread(block 6) failed [ 129.415301] FAT-fs (loop2): Directory bread(block 7) failed [ 129.415744] FAT-fs (loop2): Directory bread(block 8) failed [ 129.422446] FAT-fs (loop2): Directory bread(block 9) failed [ 129.435403] FAT-fs (loop2): Directory bread(block 6) failed [ 129.435846] FAT-fs (loop2): Directory bread(block 7) failed [ 129.440456] kmemleak: Found object by alias at 0x607f1a638208 [ 129.440473] CPU: 0 UID: 0 PID: 4619 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 129.440492] Tainted: [W]=WARN [ 129.440496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.440503] Call Trace: [ 129.440508] [ 129.440513] dump_stack_lvl+0xca/0x120 [ 129.440543] __lookup_object+0x94/0xb0 [ 129.440560] delete_object_full+0x27/0x70 [ 129.440577] free_percpu+0x30/0x1160 [ 129.440594] ? arch_uprobe_clear_state+0x16/0x140 [ 129.440617] futex_hash_free+0x38/0xc0 [ 129.440635] mmput+0x2d3/0x390 [ 129.440654] do_exit+0x79d/0x2970 [ 129.440671] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 129.440693] ? __pfx_do_exit+0x10/0x10 [ 129.440706] ? find_held_lock+0x2b/0x80 [ 129.440725] ? get_signal+0x835/0x2340 [ 129.440746] do_group_exit+0xd3/0x2a0 [ 129.440761] get_signal+0x2315/0x2340 [ 129.440778] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 129.440795] ? __pfx_get_signal+0x10/0x10 [ 129.440811] ? do_futex+0x135/0x370 [ 129.440825] ? __pfx_do_futex+0x10/0x10 [ 129.440840] arch_do_signal_or_restart+0x80/0x790 [ 129.440859] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 129.440875] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 129.440895] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 129.440914] ? __pfx___x64_sys_futex+0x10/0x10 [ 129.440934] exit_to_user_mode_loop+0x8b/0x110 [ 129.440947] do_syscall_64+0x2f7/0x360 [ 129.440971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.440984] RIP: 0033:0x7fd4a2c12b19 [ 129.440993] Code: Unable to access opcode bytes at 0x7fd4a2c12aef. [ 129.440998] RSP: 002b:00007fd4a0188218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.441010] RAX: fffffffffffffe00 RBX: 00007fd4a2d25f68 RCX: 00007fd4a2c12b19 [ 129.441021] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4a2d25f68 [ 129.441028] RBP: 00007fd4a2d25f60 R08: 0000000000000000 R09: 0000000000000000 [ 129.441035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4a2d25f6c [ 129.441042] R13: 00007ffeff8b95ef R14: 00007fd4a0188300 R15: 0000000000022000 [ 129.441060] [ 129.441064] kmemleak: Object (percpu) 0x607f1a638204 (size 8): [ 129.441071] kmemleak: comm "syz-executor.7", pid 4621, jiffies 4294796229 [ 129.441078] kmemleak: min_count = 1 [ 129.441081] kmemleak: count = 0 [ 129.441085] kmemleak: flags = 0x21 [ 129.441089] kmemleak: checksum = 0 [ 129.441093] kmemleak: backtrace: [ 129.441097] pcpu_alloc_noprof+0x87a/0x1170 [ 129.441111] alloc_vfsmnt+0x135/0x6e0 [ 129.441125] vfs_create_mount.part.0+0x40/0x440 [ 129.441139] path_mount+0x1637/0x1dd0 [ 129.441151] __x64_sys_mount+0x27b/0x300 [ 129.441162] do_syscall_64+0xbf/0x360 [ 129.441170] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:18:05 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x3) fcntl$addseals(r1, 0x409, 0x9) sendfile(r1, r0, 0x0, 0xdc) 13:18:05 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) 13:18:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2288, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:18:05 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) [ 129.644354] Bluetooth: hci0: command 0x0c1a tx timeout 13:18:05 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x3) fcntl$addseals(r1, 0x409, 0x9) sendfile(r1, r0, 0x0, 0xdc) 13:18:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2288, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:18:05 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) 13:18:05 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x3) fcntl$addseals(r1, 0x409, 0x9) sendfile(r1, r0, 0x0, 0xdc) 13:18:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:06 executing program 5: set_mempolicy(0x2004, 0x0, 0x0) 13:18:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:06 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x3) fcntl$addseals(r1, 0x409, 0x9) sendfile(r1, r0, 0x0, 0xdc) 13:18:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, 0x0) 13:18:06 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) 13:18:06 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) finit_module(r0, 0x0, 0x0) 13:18:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140)) 13:18:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, 0x0) 13:18:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f00000000c0)) 13:18:06 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) 13:18:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140)) 13:18:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 13:18:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '{)'}, {0x20, '\x00'}]}, 0x10) 13:18:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_PACK_ID(r2, 0x227b, 0x0) 13:18:06 executing program 0: mq_open(&(0x7f0000000040)='wlan0\x00', 0x40, 0x0, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x6}) 13:18:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140)) 13:18:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, 0x0) 13:18:06 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1, 0x0) 13:18:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f00000000c0)) 13:18:06 executing program 0: utimensat(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0) 13:18:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '{)'}, {0x20, '\x00'}]}, 0x10) 13:18:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, 0x0) 13:18:06 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) 13:18:06 executing program 1: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x80031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 13:18:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f00000000c0)) 13:18:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4c, 0x0, &(0x7f00000018c0)) 13:18:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140)) 13:18:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '{)'}, {0x20, '\x00'}]}, 0x10) 13:18:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f00000000c0)) 13:18:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x8) [ 130.540287] Bluetooth: hci7: command 0x0c1a tx timeout [ 130.540891] Bluetooth: hci5: command 0x0c1a tx timeout [ 130.541347] Bluetooth: hci6: command 0x0c1a tx timeout [ 130.541749] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.542145] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.542694] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.542722] Bluetooth: hci1: command 0x0c1a tx timeout 13:18:06 executing program 1: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0) 13:18:06 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) 13:18:06 executing program 1: setresuid(0xee00, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setreuid(r1, 0x0) 13:18:06 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x34, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 13:18:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 13:18:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x8) 13:18:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3007}, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 13:18:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '{)'}, {0x20, '\x00'}]}, 0x10) 13:18:06 executing program 2: ptrace$peekuser(0x3, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 13:18:06 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) 13:18:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 13:18:06 executing program 1: setresuid(0xee00, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setreuid(r1, 0x0) 13:18:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 13:18:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x8) 13:18:06 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x4, 0x0, "5c2387b3abf58f4f"}}}, 0xe) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_reconf_req={{0x19, 0x81, 0xa}, {0x80, 0xf3d, [0x64, 0xc6cf, 0x6]}}}}, 0x17) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x35, 0x4}, {0xff, 0xfff7}}}}, 0x11) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040f0404001104a8f502c7f56d7b64e8a8de75506f54588e80ba24a23f7c4f6af9aae09bb6ee1c57875aef328ca137ee37f43c9094fc209f4aa96f25caf67c31735e93fbaf989706d7907a36f7eb24ccea7e1b4a268c1a95efcf9a06097204c3d16ca08530b6d73f98b2734c1d2e911118cd20c0aff517f85ded2403fac1fa3aa97c5f02457cb4f25ecc64299a320843ced0eb76f550382844a67188d025ae6304457a9055b0f872d9ee733e47e9d7a2279e1649ea2c1b"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) getdents64(r0, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x1ff, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x3, 0x8}, {0x5ace, 0x8000, 0x2, 0x200}}}}, 0x15) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1b, 0x2}, {0x80}}}}, 0xf) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 13:18:06 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000100)) 13:18:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 13:18:06 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x34, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 13:18:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 13:18:06 executing program 1: setresuid(0xee00, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setreuid(r1, 0x0) 13:18:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) [ 130.888707] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 130.890279] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 130.890958] Bluetooth: hci7: unexpected event for opcode 0x0411 [ 130.892957] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 130.898650] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.914832] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 130.916718] Bluetooth: hci7: ACL packet for unknown connection handle 201 13:18:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 13:18:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) [ 130.953119] kmemleak: Found object by alias at 0x607f1a638208 [ 130.953136] CPU: 0 UID: 0 PID: 4753 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 130.953155] Tainted: [W]=WARN [ 130.953160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.953171] Call Trace: [ 130.953176] [ 130.953180] dump_stack_lvl+0xca/0x120 [ 130.953210] __lookup_object+0x94/0xb0 [ 130.953228] delete_object_full+0x27/0x70 [ 130.953245] free_percpu+0x30/0x1160 [ 130.953262] ? arch_uprobe_clear_state+0x16/0x140 [ 130.953283] futex_hash_free+0x38/0xc0 [ 130.953298] mmput+0x2d3/0x390 [ 130.953317] do_exit+0x79d/0x2970 [ 130.953332] ? signal_wake_up_state+0x85/0x120 [ 130.953349] ? zap_other_threads+0x2b9/0x3a0 [ 130.953365] ? __pfx_do_exit+0x10/0x10 [ 130.953378] ? do_group_exit+0x1c3/0x2a0 [ 130.953391] ? lock_release+0xc8/0x290 [ 130.953410] do_group_exit+0xd3/0x2a0 [ 130.953425] __x64_sys_exit_group+0x3e/0x50 [ 130.953439] x64_sys_call+0x18c5/0x18d0 [ 130.953455] do_syscall_64+0xbf/0x360 [ 130.953467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.953479] RIP: 0033:0x7fd4a2c12b19 [ 130.953488] Code: Unable to access opcode bytes at 0x7fd4a2c12aef. [ 130.953493] RSP: 002b:00007ffeff8b9818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 130.953504] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fd4a2c12b19 [ 130.953512] RDX: 00007fd4a2bc572b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 130.953519] RBP: 0000000000000000 R08: 0000001b2d422030 R09: 0000000000000000 [ 130.953526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.953533] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeff8b9900 [ 130.953551] [ 130.953555] kmemleak: Object (percpu) 0x607f1a638204 (size 8): [ 130.953562] kmemleak: comm "syz-executor.0", pid 4762, jiffies 4294797751 [ 130.953569] kmemleak: min_count = 1 [ 130.953573] kmemleak: count = 0 [ 130.953577] kmemleak: flags = 0x21 [ 130.953580] kmemleak: checksum = 0 [ 130.953584] kmemleak: backtrace: [ 130.953588] pcpu_alloc_noprof+0x87a/0x1170 [ 130.953603] alloc_vfsmnt+0x135/0x6e0 [ 130.953616] vfs_create_mount.part.0+0x40/0x440 [ 130.953631] fc_mount_longterm+0x126/0x160 [ 130.953645] mq_init_ns+0x42e/0x630 [ 130.953655] copy_ipcs+0x38d/0x630 [ 130.953664] create_new_namespaces+0x210/0xab0 [ 130.953680] copy_namespaces+0x45c/0x580 [ 130.953695] copy_process+0x2649/0x73c0 [ 130.953705] kernel_clone+0xea/0x7f0 [ 130.953714] __do_sys_clone+0xce/0x120 [ 130.953724] do_syscall_64+0xbf/0x360 [ 130.953732] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:18:07 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) 13:18:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x34, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 13:18:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x8) 13:18:07 executing program 1: setresuid(0xee00, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setreuid(r1, 0x0) [ 131.047335] kmemleak: Cannot insert 0x607f1a638208 into the object search tree (overlaps existing) [ 131.047354] CPU: 0 UID: 0 PID: 4762 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 131.047373] Tainted: [W]=WARN [ 131.047377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.047383] Call Trace: [ 131.047388] [ 131.047393] dump_stack_lvl+0xca/0x120 [ 131.047417] __link_object+0x190/0x210 [ 131.047436] __create_object+0x48/0x80 [ 131.047454] pcpu_alloc_noprof+0x87a/0x1170 [ 131.047480] alloc_netdev_mqs+0x131/0x1360 [ 131.047498] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 131.047522] sit_init_net+0x19e/0x630 [ 131.047534] ? __pfx_sit_init_net+0x10/0x10 [ 131.047545] ops_init+0x1e1/0x650 [ 131.047567] setup_net+0x10d/0x320 [ 131.047584] ? lockdep_init_map_type+0x4b/0x240 [ 131.047600] ? __pfx_setup_net+0x10/0x10 [ 131.047620] ? debug_mutex_init+0x37/0x70 [ 131.047641] copy_net_ns+0x2e3/0x650 [ 131.047655] create_new_namespaces+0x3f6/0xab0 [ 131.047680] copy_namespaces+0x45c/0x580 [ 131.047699] copy_process+0x2649/0x73c0 [ 131.047712] ? __lock_acquire+0x694/0x1b70 [ 131.047734] ? __pfx_copy_process+0x10/0x10 [ 131.047746] ? __lock_acquire+0xc65/0x1b70 [ 131.047769] kernel_clone+0xea/0x7f0 [ 131.047782] ? finish_task_switch.isra.0+0x201/0x840 [ 131.047803] ? __pfx_kernel_clone+0x10/0x10 [ 131.047817] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 131.047831] ? finish_task_switch.isra.0+0x206/0x840 [ 131.047852] ? trace_sched_exit_tp+0xbf/0x100 [ 131.047869] ? __schedule+0xe91/0x3590 [ 131.047888] __do_sys_clone+0xce/0x120 [ 131.047901] ? __pfx___do_sys_clone+0x10/0x10 [ 131.047913] ? __pfx___schedule+0x10/0x10 [ 131.047937] ? syscall_user_dispatch+0x78/0x140 [ 131.047957] do_syscall_64+0xbf/0x360 [ 131.047970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.047983] RIP: 0033:0x7f01fbea8b19 [ 131.047992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.048004] RSP: 002b:00007f01f941e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 131.048016] RAX: ffffffffffffffda RBX: 00007f01fbfbbf60 RCX: 00007f01fbea8b19 [ 131.048024] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 000000004c01f900 [ 131.048031] RBP: 00007f01fbf02f6d R08: 0000000000000000 R09: 0000000000000000 [ 131.048038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.048045] R13: 00007ffef75c046f R14: 00007f01f941e300 R15: 0000000000022000 [ 131.048063] [ 131.049155] kmemleak: Kernel memory leak detector disabled [ 131.049159] kmemleak: Object (percpu) 0x607f1a638204 (size 8): [ 131.049166] kmemleak: comm "syz-executor.0", pid 4762, jiffies 4294797751 [ 131.049173] kmemleak: min_count = 1 [ 131.049177] kmemleak: count = 0 [ 131.049181] kmemleak: flags = 0x21 [ 131.049185] kmemleak: checksum = 0 [ 131.049189] kmemleak: backtrace: [ 131.049192] pcpu_alloc_noprof+0x87a/0x1170 [ 131.049208] alloc_vfsmnt+0x135/0x6e0 [ 131.049221] vfs_create_mount.part.0+0x40/0x440 [ 131.049237] fc_mount_longterm+0x126/0x160 [ 131.049251] mq_init_ns+0x42e/0x630 [ 131.049262] copy_ipcs+0x38d/0x630 [ 131.049271] create_new_namespaces+0x210/0xab0 [ 131.049287] copy_namespaces+0x45c/0x580 [ 131.049303] copy_process+0x2649/0x73c0 [ 131.049313] kernel_clone+0xea/0x7f0 [ 131.049323] __do_sys_clone+0xce/0x120 [ 131.049333] do_syscall_64+0xbf/0x360 [ 131.049342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.101969] kmemleak: Found object by alias at 0x607f1a638208 [ 131.101987] CPU: 0 UID: 0 PID: 4768 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 131.102005] Tainted: [W]=WARN [ 131.102009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.102016] Call Trace: [ 131.102020] [ 131.102024] dump_stack_lvl+0xca/0x120 [ 131.102047] __lookup_object+0x94/0xb0 [ 131.102063] delete_object_full+0x27/0x70 [ 131.102079] free_percpu+0x30/0x1160 [ 131.102093] ? arch_uprobe_clear_state+0x16/0x140 [ 131.102114] futex_hash_free+0x38/0xc0 [ 131.102128] mmput+0x2d3/0x390 [ 131.102146] do_exit+0x79d/0x2970 [ 131.102160] ? signal_wake_up_state+0x85/0x120 [ 131.102177] ? zap_other_threads+0x2b9/0x3a0 [ 131.102193] ? __pfx_do_exit+0x10/0x10 [ 131.102205] ? do_group_exit+0x1c3/0x2a0 [ 131.102219] ? lock_release+0xc8/0x290 [ 131.102236] do_group_exit+0xd3/0x2a0 [ 131.102251] __x64_sys_exit_group+0x3e/0x50 [ 131.102265] x64_sys_call+0x18c5/0x18d0 [ 131.102280] do_syscall_64+0xbf/0x360 [ 131.102291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.102302] RIP: 0033:0x7fd4a2c12b19 [ 131.102311] Code: Unable to access opcode bytes at 0x7fd4a2c12aef. [ 131.102317] RSP: 002b:00007ffeff8b9818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 131.102327] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fd4a2c12b19 [ 131.102335] RDX: 00007fd4a2bc572b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 131.102343] RBP: 0000000000000000 R08: 0000001b2d42200c R09: 0000000000000000 [ 131.102350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.102357] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeff8b9900 [ 131.102374] [ 131.102378] kmemleak: Object (percpu) 0x607f1a638204 (size 8): [ 131.102384] kmemleak: comm "syz-executor.0", pid 4762, jiffies 4294797751 [ 131.102391] kmemleak: min_count = 1 [ 131.102396] kmemleak: count = 0 [ 131.102399] kmemleak: flags = 0x21 [ 131.102403] kmemleak: checksum = 0 [ 131.102407] kmemleak: backtrace: [ 131.102409] pcpu_alloc_noprof+0x87a/0x1170 [ 131.102424] alloc_vfsmnt+0x135/0x6e0 [ 131.102436] vfs_create_mount.part.0+0x40/0x440 [ 131.102451] fc_mount_longterm+0x126/0x160 [ 131.102464] mq_init_ns+0x42e/0x630 [ 131.102474] copy_ipcs+0x38d/0x630 [ 131.102482] create_new_namespaces+0x210/0xab0 [ 131.102498] copy_namespaces+0x45c/0x580 [ 131.102512] copy_process+0x2649/0x73c0 [ 131.102522] kernel_clone+0xea/0x7f0 [ 131.102532] __do_sys_clone+0xce/0x120 [ 131.102542] do_syscall_64+0xbf/0x360 [ 131.102550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.130010] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 131.130962] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.131496] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 131.131555] Bluetooth: hci7: unexpected event for opcode 0x0411 [ 131.131579] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 131.153604] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 131.159603] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 131.215455] kmemleak: Found object by alias at 0x607f1a638208 [ 131.215477] CPU: 0 UID: 0 PID: 58 Comm: kworker/0:2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 131.215495] Tainted: [W]=WARN [ 131.215499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.215507] Workqueue: events free_ipc [ 131.215527] Call Trace: [ 131.215531] [ 131.215536] dump_stack_lvl+0xca/0x120 [ 131.215560] __lookup_object+0x94/0xb0 [ 131.215578] delete_object_full+0x27/0x70 [ 131.215595] free_percpu+0x30/0x1160 [ 131.215617] percpu_counter_destroy_many+0x188/0x2b0 [ 131.215638] msg_exit_ns+0x4c/0x60 [ 131.215655] free_ipc+0x189/0x2b0 [ 131.215667] process_one_work+0x8e1/0x19c0 [ 131.215692] ? __pfx_process_one_work+0x10/0x10 [ 131.215706] ? move_linked_works+0x172/0x270 [ 131.215728] ? assign_work+0x196/0x240 [ 131.215744] worker_thread+0x67e/0xe90 [ 131.215758] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 131.215776] ? __pfx_worker_thread+0x10/0x10 [ 131.215791] kthread+0x3c8/0x740 [ 131.215805] ? __pfx_kthread+0x10/0x10 [ 131.215817] ? ret_from_fork+0x23/0x430 [ 131.215836] ? lock_release+0xc8/0x290 [ 131.215851] ? __pfx_kthread+0x10/0x10 [ 131.215865] ret_from_fork+0x34b/0x430 [ 131.215881] ? __pfx_kthread+0x10/0x10 [ 131.215894] ret_from_fork_asm+0x1a/0x30 [ 131.215920] [ 131.215924] kmemleak: Object (percpu) 0x607f1a638204 (size 8): [ 131.215931] kmemleak: comm "syz-executor.0", pid 4762, jiffies 4294797751 [ 131.215938] kmemleak: min_count = 1 [ 131.215942] kmemleak: count = 0 [ 131.215946] kmemleak: flags = 0x21 [ 131.215949] kmemleak: checksum = 0 [ 131.215953] kmemleak: backtrace: [ 131.215956] pcpu_alloc_noprof+0x87a/0x1170 [ 131.215971] alloc_vfsmnt+0x135/0x6e0 [ 131.215985] vfs_create_mount.part.0+0x40/0x440 [ 131.215999] fc_mount_longterm+0x126/0x160 [ 131.216013] mq_init_ns+0x42e/0x630 [ 131.216021] copy_ipcs+0x38d/0x630 [ 131.216030] create_new_namespaces+0x210/0xab0 [ 131.216046] copy_namespaces+0x45c/0x580 [ 131.216061] copy_process+0x2649/0x73c0 [ 131.216072] kernel_clone+0xea/0x7f0 [ 131.216082] __do_sys_clone+0xce/0x120 [ 131.216091] do_syscall_64+0xbf/0x360 [ 131.216101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.652610] kmemleak: Automatic memory scanning thread ended [ 131.693113] Bluetooth: hci0: command 0x0c1a tx timeout 13:18:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0bc5310, &(0x7f0000000100)={{}, 'port1\x00'}) 13:18:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$FIONREAD(r1, 0x5411, &(0x7f0000001a00)) 13:18:07 executing program 2: pipe(&(0x7f0000000880)={0xffffffffffffffff}) setresuid(0x0, 0xee01, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) 13:18:07 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 13:18:07 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000003c0)={0x81, 0x0, 'client0\x00', 0x0, "be020b6ddfc64197", "8bd26414e9717e9bce7f67f15f1037789da384c7d953c8d70529cf2bfc27085f"}) 13:18:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x34, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 13:18:07 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) getgroups(0x1, &(0x7f0000000480)=[0xee00]) 13:18:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000180)) 13:18:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xee8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f0000000040)={r5, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@local, 0x2e, r5}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x29, 0x1, 0x9, 0x3, 0x49, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0x0, 0x4}}) r8 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x200c00, 0x14) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x2710}, 0x10) write(r0, 0x0, 0x0) 13:18:08 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@generic={0x44, 0x4, "c7e8"}]}}, @timestamp}}}}, 0x0) 13:18:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000003c0)={0x81, 0x0, 'client0\x00', 0x0, "be020b6ddfc64197", "8bd26414e9717e9bce7f67f15f1037789da384c7d953c8d70529cf2bfc27085f"}) 13:18:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) getgroups(0x1, &(0x7f0000000480)=[0xee00]) [ 131.976219] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode 13:18:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$FIONREAD(r1, 0x5411, &(0x7f0000001a00)) 13:18:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000180)) 13:18:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0bc5310, &(0x7f0000000100)={{}, 'port1\x00'}) 13:18:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) getgroups(0x1, &(0x7f0000000480)=[0xee00]) 13:18:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) getgroups(0x1, &(0x7f0000000480)=[0xee00]) [ 132.208888] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 132.214317] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 132.235573] mac80211_hwsim hwsim5 wlan1: left promiscuous mode 13:18:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000003c0)={0x81, 0x0, 'client0\x00', 0x0, "be020b6ddfc64197", "8bd26414e9717e9bce7f67f15f1037789da384c7d953c8d70529cf2bfc27085f"}) 13:18:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$FIONREAD(r1, 0x5411, &(0x7f0000001a00)) 13:18:08 executing program 4: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x50000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:18:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) getgroups(0x1, &(0x7f0000000480)=[0xee00]) 13:18:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xee8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) VM DIAGNOSIS: 13:18:00 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000100 RCX=ffffffff81b96dd8 RDX=ffff88800fad3700 RSI=ffffffff81b96da3 RDI=0000000000000001 RBP=ffff88800f8e7c48 RSP=ffff88800f8e7bb8 R8 =0000000000000001 R9 =ffffffff81b964d3 R10=0000000000000001 R11=0000000000000001 R12=ffff88800f8e7d24 R13=00000000000007d9 R14=ffff88800f8e7ce8 R15=0000000000000001 RIP=ffffffff81b96da5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557ddde400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffc5c37c2c CR3=00000000424c7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000046 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888017ba7630 R8 =0000000000000000 R9 =ffffed1001d26046 R10=0000000000000046 R11=0000000000000001 R12=0000000000000046 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555557707400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffef75bee78 CR3=000000003eddd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000