Warning: Permanently added '[localhost]:13320' (ECDSA) to the list of known hosts. 2025/09/01 08:37:27 fuzzer started 2025/09/01 08:37:27 dialing manager at localhost:35473 syzkaller login: [ 50.044182] cgroup: Unknown subsys name 'net' [ 50.112640] cgroup: Unknown subsys name 'cpuset' [ 50.128629] cgroup: Unknown subsys name 'rlimit' 2025/09/01 08:37:37 syscalls: 2214 2025/09/01 08:37:37 code coverage: enabled 2025/09/01 08:37:37 comparison tracing: enabled 2025/09/01 08:37:37 extra coverage: enabled 2025/09/01 08:37:37 setuid sandbox: enabled 2025/09/01 08:37:37 namespace sandbox: enabled 2025/09/01 08:37:37 Android sandbox: enabled 2025/09/01 08:37:37 fault injection: enabled 2025/09/01 08:37:37 leak checking: enabled 2025/09/01 08:37:37 net packet injection: enabled 2025/09/01 08:37:37 net device setup: enabled 2025/09/01 08:37:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 08:37:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 08:37:37 USB emulation: enabled 2025/09/01 08:37:37 hci packet injection: enabled 2025/09/01 08:37:37 wifi device emulation: enabled 2025/09/01 08:37:37 802.15.4 emulation: enabled 2025/09/01 08:37:37 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 08:37:38 fetching corpus: 50, signal 26431/29575 (executing program) 2025/09/01 08:37:38 fetching corpus: 100, signal 35009/39275 (executing program) 2025/09/01 08:37:38 fetching corpus: 150, signal 43402/48487 (executing program) 2025/09/01 08:37:38 fetching corpus: 200, signal 49021/54932 (executing program) 2025/09/01 08:37:38 fetching corpus: 250, signal 55663/62084 (executing program) 2025/09/01 08:37:38 fetching corpus: 300, signal 62202/68970 (executing program) 2025/09/01 08:37:38 fetching corpus: 350, signal 66722/73830 (executing program) 2025/09/01 08:37:38 fetching corpus: 400, signal 70452/77890 (executing program) 2025/09/01 08:37:39 fetching corpus: 450, signal 74459/82064 (executing program) 2025/09/01 08:37:39 fetching corpus: 500, signal 76188/84241 (executing program) 2025/09/01 08:37:39 fetching corpus: 550, signal 80060/88080 (executing program) 2025/09/01 08:37:39 fetching corpus: 600, signal 82504/90620 (executing program) 2025/09/01 08:37:39 fetching corpus: 650, signal 84463/92771 (executing program) 2025/09/01 08:37:39 fetching corpus: 700, signal 87333/95542 (executing program) 2025/09/01 08:37:39 fetching corpus: 750, signal 89853/97971 (executing program) 2025/09/01 08:37:39 fetching corpus: 800, signal 91842/99919 (executing program) 2025/09/01 08:37:40 fetching corpus: 850, signal 96065/103280 (executing program) 2025/09/01 08:37:40 fetching corpus: 900, signal 97597/104745 (executing program) 2025/09/01 08:37:40 fetching corpus: 950, signal 99743/106559 (executing program) 2025/09/01 08:37:40 fetching corpus: 1000, signal 102175/108483 (executing program) 2025/09/01 08:37:40 fetching corpus: 1050, signal 103379/109610 (executing program) 2025/09/01 08:37:40 fetching corpus: 1100, signal 105708/111331 (executing program) 2025/09/01 08:37:40 fetching corpus: 1150, signal 108030/112909 (executing program) 2025/09/01 08:37:41 fetching corpus: 1200, signal 109135/113744 (executing program) 2025/09/01 08:37:41 fetching corpus: 1250, signal 110002/114453 (executing program) 2025/09/01 08:37:41 fetching corpus: 1300, signal 111409/115457 (executing program) 2025/09/01 08:37:41 fetching corpus: 1350, signal 112451/116169 (executing program) 2025/09/01 08:37:41 fetching corpus: 1400, signal 114192/117230 (executing program) 2025/09/01 08:37:41 fetching corpus: 1450, signal 115671/118095 (executing program) 2025/09/01 08:37:41 fetching corpus: 1500, signal 116516/118615 (executing program) 2025/09/01 08:37:42 fetching corpus: 1550, signal 117684/119279 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119615 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119657 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119689 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119733 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119780 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119813 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119837 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119873 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119921 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119956 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/119988 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120028 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120069 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120108 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120149 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120186 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120226 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120264 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120323 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120369 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120408 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120443 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120485 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120529 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120564 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120604 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120638 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120667 (executing program) 2025/09/01 08:37:42 fetching corpus: 1583, signal 118290/120667 (executing program) 2025/09/01 08:37:44 starting 8 fuzzer processes 08:37:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0x7f}, {}]}}) 08:37:44 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000440)=ANY=[]) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 08:37:44 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 08:37:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x4a}}) 08:37:44 executing program 2: semget$private(0x0, 0x5, 0x0) 08:37:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 67.265704] audit: type=1400 audit(1756715864.984:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:37:45 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 08:37:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000000c0)="ad87cf5ea909a7e9bee7180d28ca29c2c959c7156a0ee64ea5b4a5b273289e684fbefaa14925fc65fcd33d52e8b2e499deb52b5b06528ffd7e14f5902cd78d84a04b7c20767be5036c5e1474894b07b7c5af031b5a73c425dc38e089f3ce586012193dc5ef27785d70943b7aad9cf2d3feef2a3391bb9614e32b33932acd9efaaab343ff8b5f0ffe2d803eb415d81e8063667543e3c38ee8425102d357c971aa71ef597bb4f78443", 0xa8) [ 68.495829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.501221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.503245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.505313] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.507013] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.512049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.513884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.517725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.524873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.535930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.629002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.635859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.638222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.640269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.642991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.647236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.652648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.654625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.660811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.668839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.723674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.731046] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.732859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.736011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.738126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.740971] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.743718] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.747644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.749108] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.752613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.752633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.756076] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.762305] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.764466] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.768284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.771290] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.772502] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.775625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.779039] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.811733] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 70.594081] Bluetooth: hci0: command tx timeout [ 70.594087] Bluetooth: hci1: command tx timeout [ 70.721552] Bluetooth: hci2: command tx timeout [ 70.722614] Bluetooth: hci3: command tx timeout [ 70.786492] Bluetooth: hci6: command tx timeout [ 70.850515] Bluetooth: hci5: command tx timeout [ 70.850649] Bluetooth: hci7: command tx timeout [ 70.851121] Bluetooth: hci4: command tx timeout [ 72.643496] Bluetooth: hci1: command tx timeout [ 72.643521] Bluetooth: hci0: command tx timeout [ 72.769472] Bluetooth: hci2: command tx timeout [ 72.770647] Bluetooth: hci3: command tx timeout [ 72.833495] Bluetooth: hci6: command tx timeout [ 72.897793] Bluetooth: hci7: command tx timeout [ 72.898266] Bluetooth: hci5: command tx timeout [ 72.898876] Bluetooth: hci4: command tx timeout [ 74.689555] Bluetooth: hci0: command tx timeout [ 74.690581] Bluetooth: hci1: command tx timeout [ 74.817607] Bluetooth: hci3: command tx timeout [ 74.817790] Bluetooth: hci2: command tx timeout [ 74.882474] Bluetooth: hci6: command tx timeout [ 74.945678] Bluetooth: hci4: command tx timeout [ 74.945691] Bluetooth: hci5: command tx timeout [ 74.946132] Bluetooth: hci7: command tx timeout [ 76.739537] Bluetooth: hci1: command tx timeout [ 76.739730] Bluetooth: hci0: command tx timeout [ 76.865520] Bluetooth: hci2: command tx timeout [ 76.866795] Bluetooth: hci3: command tx timeout [ 76.930176] Bluetooth: hci6: command tx timeout [ 76.993938] Bluetooth: hci4: command tx timeout [ 76.993983] Bluetooth: hci5: command tx timeout [ 76.994857] Bluetooth: hci7: command tx timeout [ 107.382787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.383929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.589361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.590282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.721007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.722446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.834474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.835218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.974334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.974941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.074809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.075915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.182942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.183658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:38:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x4a}}) [ 108.339498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.340125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:38:26 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) [ 108.437108] audit: type=1400 audit(1756715906.154:8): avc: denied { open } for pid=3831 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 108.443319] audit: type=1400 audit(1756715906.154:9): avc: denied { kernel } for pid=3831 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:38:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x4a}}) 08:38:26 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 08:38:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x4a}}) 08:38:26 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 08:38:26 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 08:38:26 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) [ 108.697718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.698351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.789054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.789739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.994445] loop1: detected capacity change from 0 to 512 [ 109.010308] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 109.027485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.078231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.151464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.152127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.203267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.203988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.376579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.377220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.389934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.390581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.428764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.429779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.472167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.472998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:38:27 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 08:38:27 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 08:38:27 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000440)=ANY=[]) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 08:38:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) [ 109.815041] loop1: detected capacity change from 0 to 512 08:38:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0x7f}, {}]}}) 08:38:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000000c0)="ad87cf5ea909a7e9bee7180d28ca29c2c959c7156a0ee64ea5b4a5b273289e684fbefaa14925fc65fcd33d52e8b2e499deb52b5b06528ffd7e14f5902cd78d84a04b7c20767be5036c5e1474894b07b7c5af031b5a73c425dc38e089f3ce586012193dc5ef27785d70943b7aad9cf2d3feef2a3391bb9614e32b33932acd9efaaab343ff8b5f0ffe2d803eb415d81e8063667543e3c38ee8425102d357c971aa71ef597bb4f78443", 0xa8) 08:38:27 executing program 2: semget$private(0x0, 0x5, 0x0) [ 109.835051] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 109.839882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:38:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 109.876565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:38:27 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000440)=ANY=[]) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 08:38:27 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 08:38:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0x7f}, {}]}}) 08:38:27 executing program 2: semget$private(0x0, 0x5, 0x0) [ 109.935119] loop1: detected capacity change from 0 to 512 [ 109.952547] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 109.961966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.029761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:38:27 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 08:38:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000000c0)="ad87cf5ea909a7e9bee7180d28ca29c2c959c7156a0ee64ea5b4a5b273289e684fbefaa14925fc65fcd33d52e8b2e499deb52b5b06528ffd7e14f5902cd78d84a04b7c20767be5036c5e1474894b07b7c5af031b5a73c425dc38e089f3ce586012193dc5ef27785d70943b7aad9cf2d3feef2a3391bb9614e32b33932acd9efaaab343ff8b5f0ffe2d803eb415d81e8063667543e3c38ee8425102d357c971aa71ef597bb4f78443", 0xa8) 08:38:27 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:27 executing program 2: semget$private(0x0, 0x5, 0x0) 08:38:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0x7f}, {}]}}) 08:38:27 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000440)=ANY=[]) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 08:38:27 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) [ 110.198506] loop1: detected capacity change from 0 to 512 [ 110.219831] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 110.278153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.326969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:38:28 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 08:38:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000000c0)="ad87cf5ea909a7e9bee7180d28ca29c2c959c7156a0ee64ea5b4a5b273289e684fbefaa14925fc65fcd33d52e8b2e499deb52b5b06528ffd7e14f5902cd78d84a04b7c20767be5036c5e1474894b07b7c5af031b5a73c425dc38e089f3ce586012193dc5ef27785d70943b7aad9cf2d3feef2a3391bb9614e32b33932acd9efaaab343ff8b5f0ffe2d803eb415d81e8063667543e3c38ee8425102d357c971aa71ef597bb4f78443", 0xa8) 08:38:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 110.741185] ------------[ cut here ]------------ [ 110.741877] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.2/4004 [ 110.742644] Modules linked in: [ 110.742969] CPU: 1 UID: 0 PID: 4004 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 110.744904] Tainted: [W]=WARN [ 110.745745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 110.747398] RIP: 0010:mntput_no_expire+0x78e/0xbe0 [ 110.748391] Code: 05 d6 30 81 04 01 e8 71 df 91 ff e9 41 fc ff ff e8 27 47 b4 ff 31 ff 44 89 ee e8 4d 42 b4 ff 45 85 ed 79 09 e8 13 47 b4 ff 90 <0f> 0b 90 e8 0a 47 b4 ff e8 b5 2d fc 02 31 ff 89 c5 89 c6 e8 2a 42 [ 110.752626] RSP: 0018:ffff88804488fa18 EFLAGS: 00010293 [ 110.753791] RAX: 0000000000000000 RBX: 1ffff11008911f48 RCX: ffffffff81bfaf93 [ 110.754374] RDX: ffff888016cd9b80 RSI: ffffffff81bfaf9d RDI: 0000000000000005 [ 110.754960] RBP: ffff888042eac1c0 R08: 0000000000000001 R09: 0000000000000000 [ 110.755543] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88804488fa80 [ 110.756114] R13: 00000000ffffffff R14: ffff888042eac1c0 R15: ffff888042eac150 [ 110.756727] FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 110.757373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.757855] CR2: 000000000000000e CR3: 000000003ee4f000 CR4: 0000000000350ef0 [ 110.758433] Call Trace: [ 110.758644] [ 110.758833] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 110.759301] ? __virt_addr_valid+0x2e8/0x5d0 [ 110.759689] ? __pfx_mntput_no_expire+0x10/0x10 [ 110.760081] cleanup_mnt+0x41e/0x430 [ 110.760395] task_work_run+0x172/0x280 [ 110.760737] ? __pfx_task_work_run+0x10/0x10 [ 110.761107] do_exit+0x846/0x2970 [ 110.761396] ? proc_coredump_connector+0x2bf/0x4e0 [ 110.761814] ? __pfx_do_exit+0x10/0x10 [ 110.762130] ? find_held_lock+0x2b/0x80 [ 110.762477] ? get_signal+0x1a05/0x2340 [ 110.762809] do_group_exit+0xd3/0x2a0 [ 110.763122] get_signal+0x2315/0x2340 [ 110.763462] ? __pfx_get_signal+0x10/0x10 [ 110.763803] ? force_sig_fault+0xb4/0xf0 [ 110.764145] ? __pfx_force_sig_fault+0x10/0x10 [ 110.764555] arch_do_signal_or_restart+0x80/0x790 [ 110.764948] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 110.765384] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 110.765870] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 110.766247] irqentry_exit_to_user_mode+0x106/0x1c0 [ 110.766673] exc_page_fault+0xd9/0x180 [ 110.766994] asm_exc_page_fault+0x26/0x30 [ 110.767326] RIP: 0033:0xe [ 110.767573] Code: Unable to access opcode bytes at 0xffffffffffffffe4. [ 110.768088] RSP: 002b:00007fd7f4bc2190 EFLAGS: 00010217 [ 110.768538] RAX: 0000000000000000 RBX: 00007fd7f775ff60 RCX: 00007fd7f764cb19 [ 110.769101] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200002c0 [ 110.769686] RBP: 00007fd7f76a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 110.770249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.770827] R13: 00007ffeb9615a7f R14: 00007fd7f4bc2300 R15: 0000000000022000 [ 110.771424] [ 110.771618] irq event stamp: 669 [ 110.771887] hardirqs last enabled at (677): [] __up_console_sem+0x78/0x80 [ 110.772588] hardirqs last disabled at (686): [] __up_console_sem+0x5d/0x80 [ 110.773254] softirqs last enabled at (196): [] handle_softirqs+0x50c/0x770 [ 110.773951] softirqs last disabled at (169): [] __irq_exit_rcu+0xc4/0x100 [ 110.774630] ---[ end trace 0000000000000000 ]--- 08:38:28 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:28 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000440)=ANY=[]) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 08:38:29 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 112.311960] loop1: detected capacity change from 0 to 512 [ 112.336537] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 112.353027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:38:30 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000440)=ANY=[]) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 112.405199] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:38:30 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000440)=ANY=[]) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 112.512201] loop1: detected capacity change from 0 to 512 [ 112.518186] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 112.523360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.544541] loop7: detected capacity change from 0 to 512 [ 112.548821] kmemleak: Found object by alias at 0x607f1a63e264 [ 112.548840] CPU: 0 UID: 0 PID: 4108 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 112.548860] Tainted: [W]=WARN [ 112.548864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.548872] Call Trace: [ 112.548876] [ 112.548881] dump_stack_lvl+0xca/0x120 [ 112.548915] __lookup_object+0x94/0xb0 [ 112.548935] delete_object_full+0x27/0x70 [ 112.548952] free_percpu+0x30/0x1160 [ 112.548969] ? arch_uprobe_clear_state+0x16/0x140 [ 112.548991] futex_hash_free+0x38/0xc0 [ 112.549007] mmput+0x2d3/0x390 [ 112.549026] do_exit+0x79d/0x2970 [ 112.549040] ? perf_trace_preemptirq_template+0x259/0x430 [ 112.549056] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.549069] ? __pfx_do_exit+0x10/0x10 [ 112.549084] ? find_held_lock+0x2b/0x80 [ 112.549104] ? get_signal+0x835/0x2340 [ 112.549125] do_group_exit+0xd3/0x2a0 [ 112.549140] get_signal+0x2315/0x2340 [ 112.549158] ? task_mm_cid_work+0x368/0x840 [ 112.549182] ? __pfx_get_signal+0x10/0x10 [ 112.549199] ? do_futex+0x135/0x370 [ 112.549212] ? perf_trace_run_bpf_submit+0xef/0x180 [ 112.549233] arch_do_signal_or_restart+0x80/0x790 [ 112.549252] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.549269] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.549284] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.549298] ? xfd_validate_state+0x55/0x180 [ 112.549320] exit_to_user_mode_loop+0x8b/0x110 [ 112.549333] do_syscall_64+0x2f7/0x360 [ 112.549351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.549364] RIP: 0033:0x7f816a7f1b19 [ 112.549374] Code: Unable to access opcode bytes at 0x7f816a7f1aef. [ 112.549379] RSP: 002b:00007f8167d67218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.549391] RAX: fffffffffffffe00 RBX: 00007f816a904f68 RCX: 00007f816a7f1b19 [ 112.549400] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f816a904f68 [ 112.549407] RBP: 00007f816a904f60 R08: 0000000000000000 R09: 0000000000000000 [ 112.549414] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816a904f6c [ 112.549421] R13: 00007ffdeeee695f R14: 00007f8167d67300 R15: 0000000000022000 [ 112.549438] [ 112.549442] kmemleak: Object (percpu) 0x607f1a63e260 (size 8): [ 112.549449] kmemleak: comm "syz-executor.2", pid 4113, jiffies 4294779254 [ 112.549458] kmemleak: min_count = 1 [ 112.549463] kmemleak: count = 0 [ 112.549466] kmemleak: flags = 0x21 [ 112.549471] kmemleak: checksum = 0 [ 112.549475] kmemleak: backtrace: [ 112.549480] pcpu_alloc_noprof+0x87a/0x1170 [ 112.549496] alloc_vfsmnt+0x135/0x6e0 [ 112.549510] clone_mnt+0x6c/0xb70 [ 112.549525] copy_tree+0x105/0xaf0 [ 112.549536] copy_mnt_ns+0x1ab/0xab0 [ 112.549548] create_new_namespaces+0xd6/0xab0 [ 112.549565] copy_namespaces+0x45c/0x580 [ 112.549581] copy_process+0x2649/0x73c0 [ 112.549591] kernel_clone+0xea/0x7f0 [ 112.549601] __do_sys_clone3+0x1f5/0x280 [ 112.549612] do_syscall_64+0xbf/0x360 [ 112.549621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.574963] kmemleak: Cannot insert 0x607f1a63e264 into the object search tree (overlaps existing) [ 112.574979] CPU: 0 UID: 0 PID: 4119 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 112.574997] Tainted: [W]=WARN [ 112.575002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.575009] Call Trace: [ 112.575013] [ 112.575017] dump_stack_lvl+0xca/0x120 [ 112.575047] __link_object+0x190/0x210 [ 112.575066] __create_object+0x48/0x80 [ 112.575085] pcpu_alloc_noprof+0x87a/0x1170 [ 112.575110] alloc_netdev_mqs+0x131/0x1360 [ 112.575129] ? __pfx_loopback_setup+0x10/0x10 [ 112.575146] ? __pfx_loopback_net_init+0x10/0x10 [ 112.575159] loopback_net_init+0x38/0x180 [ 112.575172] ? __pfx_loopback_net_init+0x10/0x10 [ 112.575184] ops_init+0x1e1/0x650 [ 112.575198] setup_net+0x10d/0x320 [ 112.575208] ? lockdep_init_map_type+0x4b/0x240 [ 112.575225] ? __pfx_setup_net+0x10/0x10 [ 112.575237] ? debug_mutex_init+0x37/0x70 [ 112.575258] copy_net_ns+0x2e3/0x650 [ 112.575272] create_new_namespaces+0x3f6/0xab0 [ 112.575296] copy_namespaces+0x45c/0x580 [ 112.575319] copy_process+0x2649/0x73c0 [ 112.575332] ? lock_release+0xc8/0x290 [ 112.575353] ? __pfx_copy_process+0x10/0x10 [ 112.575366] ? __might_fault+0xe0/0x190 [ 112.575384] ? _copy_from_user+0x5b/0xd0 [ 112.575404] kernel_clone+0xea/0x7f0 [ 112.575418] ? __pfx_kernel_clone+0x10/0x10 [ 112.575435] ? __pfx_futex_wake+0x10/0x10 [ 112.575456] __do_sys_clone3+0x1f5/0x280 [ 112.575468] ? __pfx___do_sys_clone3+0x10/0x10 [ 112.575480] ? __might_fault+0x138/0x190 [ 112.575504] ? perf_trace_preemptirq_template+0x259/0x430 [ 112.575517] ? __x64_sys_futex+0x1c9/0x4d0 [ 112.575530] ? __x64_sys_futex+0x1d2/0x4d0 [ 112.575544] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.575558] ? xfd_validate_state+0x55/0x180 [ 112.575582] do_syscall_64+0xbf/0x360 [ 112.575596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.575609] RIP: 0033:0x7fb62e2f8b19 [ 112.575619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.575631] RSP: 002b:00007fb62b86e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 112.575643] RAX: ffffffffffffffda RBX: 00007fb62e40bf60 RCX: 00007fb62e2f8b19 [ 112.575651] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200002c0 [ 112.575659] RBP: 00007fb62e352f6d R08: 0000000000000000 R09: 0000000000000000 [ 112.575666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.575674] R13: 00007ffc7d49702f R14: 00007fb62b86e300 R15: 0000000000022000 [ 112.575690] [ 112.576713] kmemleak: Kernel memory leak detector disabled [ 112.576718] kmemleak: Object (percpu) 0x607f1a63e260 (size 8): [ 112.576725] kmemleak: comm "syz-executor.2", pid 4113, jiffies 4294779254 [ 112.576733] kmemleak: min_count = 1 [ 112.576737] kmemleak: count = 0 [ 112.576740] kmemleak: flags = 0x21 [ 112.576744] kmemleak: checksum = 0 [ 112.576748] kmemleak: backtrace: [ 112.576752] pcpu_alloc_noprof+0x87a/0x1170 [ 112.576768] alloc_vfsmnt+0x135/0x6e0 [ 112.576782] clone_mnt+0x6c/0xb70 [ 112.576797] copy_tree+0x105/0xaf0 [ 112.576808] copy_mnt_ns+0x1ab/0xab0 [ 112.576820] create_new_namespaces+0xd6/0xab0 [ 112.576836] copy_namespaces+0x45c/0x580 [ 112.576852] copy_process+0x2649/0x73c0 [ 112.576862] kernel_clone+0xea/0x7f0 [ 112.576872] __do_sys_clone3+0x1f5/0x280 [ 112.576883] do_syscall_64+0xbf/0x360 [ 112.576892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.607364] ------------[ cut here ]------------ [ 112.608148] WARNING: fs/namespace.c:1375 at cleanup_mnt+0x33f/0x430, CPU#1: syz-executor.2/4132 [ 112.609495] Modules linked in: [ 112.610143] CPU: 1 UID: 0 PID: 4132 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 112.612067] Tainted: [W]=WARN [ 112.612731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.614184] RIP: 0010:cleanup_mnt+0x33f/0x430 [ 112.615145] Code: c7 20 49 d1 85 e8 41 b3 fa 02 49 8d 7d 40 5b 48 c7 c6 d0 fa be 81 5d 41 5c 41 5d 41 5e 41 5f e9 97 9a 9c ff e8 f2 3c b4 ff 90 <0f> 0b 90 e9 e6 fc ff ff e8 e4 3c b4 ff 4c 89 ef e8 6c d7 06 00 e9 [ 112.618044] RSP: 0018:ffff88804549faf8 EFLAGS: 00010293 [ 112.619039] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81bfb6a5 [ 112.620299] RDX: ffff888042f09b80 RSI: ffffffff81bfb9be RDI: 0000000000000005 [ 112.621561] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 112.622891] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888042f0a458 [ 112.624009] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 112.625657] R13: ffff88801d7a4e00 R14: 0000000000000001 R15: ffff88801d7a4e40 [ 112.625962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.626816] FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 112.629944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.631751] CR2: 000000000000000e CR3: 000000004588f000 CR4: 0000000000350ef0 [ 112.632825] Call Trace: [ 112.633208] [ 112.633579] task_work_run+0x172/0x280 [ 112.634167] ? __pfx_task_work_run+0x10/0x10 [ 112.634866] do_exit+0x846/0x2970 [ 112.635388] ? kmem_cache_free+0x33a/0x540 [ 112.636040] ? proc_coredump_connector+0x2bf/0x4e0 [ 112.636814] ? __pfx_do_exit+0x10/0x10 [ 112.637397] ? find_held_lock+0x2b/0x80 [ 112.638038] ? get_signal+0x1a05/0x2340 [ 112.638692] do_group_exit+0xd3/0x2a0 [ 112.639264] get_signal+0x2315/0x2340 [ 112.639880] ? __pfx_get_signal+0x10/0x10 [ 112.640542] ? __schedule+0xe91/0x3590 [ 112.641136] arch_do_signal_or_restart+0x80/0x790 [ 112.641895] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.642729] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.643640] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 112.644371] irqentry_exit_to_user_mode+0x106/0x1c0 [ 112.645165] exc_page_fault+0xd9/0x180 [ 112.645801] asm_exc_page_fault+0x26/0x30 [ 112.646465] RIP: 0033:0xe [ 112.646891] Code: Unable to access opcode bytes at 0xffffffffffffffe4. [ 112.647852] RSP: 002b:00007fd7f4bc2190 EFLAGS: 00010217 [ 112.648755] RAX: 0000000000000000 RBX: 00007fd7f775ff60 RCX: 00007fd7f764cb19 [ 112.649849] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200002c0 [ 112.651140] RBP: 00007fd7f76a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 112.652200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.653257] R13: 00007ffeb9615a7f R14: 00007fd7f4bc2300 R15: 0000000000022000 [ 112.654333] [ 112.654718] irq event stamp: 1673 [ 112.655238] hardirqs last enabled at (1681): [] __up_console_sem+0x78/0x80 [ 112.656555] hardirqs last disabled at (1690): [] __up_console_sem+0x5d/0x80 [ 112.657927] softirqs last enabled at (1358): [] handle_softirqs+0x50c/0x770 [ 112.659241] softirqs last disabled at (1115): [] __irq_exit_rcu+0xc4/0x100 [ 112.660637] ---[ end trace 0000000000000000 ]--- 08:38:30 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000440)=ANY=[]) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 112.686455] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:38:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 112.738392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:38:30 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000440)=ANY=[]) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 112.766999] loop1: detected capacity change from 0 to 512 08:38:30 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000002c0)='illinois\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) 08:38:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:38:30 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 112.816864] loop7: detected capacity change from 0 to 512 [ 112.819037] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended 08:38:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 112.843570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.852039] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended 08:38:30 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0xffffffff, 0x400}, 0x1c) [ 112.877190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.989087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:38:30 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) [ 113.009110] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:38:30 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000440)=ANY=[]) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 08:38:30 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000002c0)='illinois\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) 08:38:30 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0xffffffff, 0x400}, 0x1c) 08:38:30 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000002c0)='illinois\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) [ 113.083127] loop7: detected capacity change from 0 to 512 [ 113.104510] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 113.139252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:38:30 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 08:38:30 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000002c0)='illinois\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) 08:38:30 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000002c0)='illinois\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) 08:38:30 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0xffffffff, 0x400}, 0x1c) [ 113.249006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:38:31 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000002c0)='illinois\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) 08:38:31 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 08:38:31 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x3}, 0x0) 08:38:31 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000002c0)='illinois\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) 08:38:31 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000002c0)='illinois\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) 08:38:31 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0xffffffff, 0x400}, 0x1c) 08:38:31 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{}, {0x1, 0xc8, 0x80}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xf7}}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x3, 0xc9, 0x25, 0x9}}}, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0x7f, 0x14}, {0x1ff, 0x81, 0x7ff, 0x8001, [0x1, 0x17a, 0xac92, 0x3f, 0xe43, 0x5]}}}}, 0xfffffffffffffe72) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 08:38:31 executing program 5: setgroups(0x41ad, &(0x7f00000001c0)) [ 113.773468] Bluetooth: hci0: hardware error 0xf7 08:38:31 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x3}, 0x0) 08:38:31 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 08:38:31 executing program 3: io_setup(0x40, &(0x7f0000000040)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 08:38:31 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x100, 0x0, @empty}, 0x1c) 08:38:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 08:38:31 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{}, {0x1, 0xc8, 0x80}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xf7}}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x3, 0xc9, 0x25, 0x9}}}, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0x7f, 0x14}, {0x1ff, 0x81, 0x7ff, 0x8001, [0x1, 0x17a, 0xac92, 0x3f, 0xe43, 0x5]}}}}, 0xfffffffffffffe72) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 08:38:31 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000002c0)='illinois\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) [ 113.882429] ------------[ cut here ]------------ [ 113.882924] percpu ref (free_ioctx_reqs) <= 0 (0) after switching to atomic [ 113.883097] WARNING: lib/percpu-refcount.c:197 at percpu_ref_switch_to_atomic_rcu+0x3cc/0x480, CPU#0: syz-executor.6/4226 [ 113.884462] Modules linked in: [ 113.884750] CPU: 0 UID: 255 PID: 4226 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 113.885657] Tainted: [W]=WARN [ 113.885893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.886518] RIP: 0010:percpu_ref_switch_to_atomic_rcu+0x3cc/0x480 [ 113.886980] Code: 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 9e 00 00 00 49 8b 75 e8 48 c7 c7 c0 99 e2 84 e8 25 ac e9 fe 90 <0f> 0b 90 90 e9 2b ff ff ff e8 56 de 5f ff e9 9e fe ff ff e8 dc de [ 113.888352] RSP: 0018:ffff88806ce08e20 EFLAGS: 00010286 [ 113.888772] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8139de70 [ 113.889302] RDX: ffff8880420cd280 RSI: ffffffff8139de7e RDI: 0000000000000001 [ 113.889869] RBP: 8000000000000000 R08: 0000000000000001 R09: ffffed100d9c4801 [ 113.890432] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888041c9bd00 [ 113.890957] R13: ffff888041c9bd20 R14: 0000000000000002 R15: 0000000000000003 [ 113.891500] FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 113.892090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.892561] CR2: 00007f6f76a6414c CR3: 000000003374f000 CR4: 0000000000350ef0 [ 113.893087] Call Trace: [ 113.893286] [ 113.893475] ? rcu_core+0x7c3/0x1800 [ 113.893765] rcu_core+0x7c8/0x1800 [ 113.894043] ? __pfx_rcu_core+0x10/0x10 [ 113.894345] ? mark_held_locks+0x49/0x80 [ 113.894678] handle_softirqs+0x1b1/0x770 [ 113.894999] __irq_exit_rcu+0xc4/0x100 [ 113.895310] irq_exit_rcu+0x9/0x20 [ 113.895621] sysvec_apic_timer_interrupt+0x70/0x80 [ 113.895999] [ 113.896174] [ 113.896355] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.896771] RIP: 0010:arch_check_zapped_pte+0x5f/0xe0 [ 113.897165] Code: 48 8d 04 2b c7 00 f1 f1 f1 f1 c7 40 04 00 f3 f3 f3 65 48 8b 05 ca a5 4d 06 48 89 44 24 58 31 c0 48 89 74 24 20 e8 61 1c 3d 00 <48> 8d 7c 24 20 48 89 f8 48 c1 e8 03 80 3c 28 00 75 61 48 8b 6c 24 [ 113.898519] RSP: 0018:ffff88804622f5f8 EFLAGS: 00000293 [ 113.898947] RAX: 0000000000000000 RBX: 1ffff11008c45ebf RCX: dffffc0000000000 [ 113.899507] RDX: ffff8880420cd280 RSI: ffffffff8136da4f RDI: ffff88801c9ddc80 [ 113.900034] RBP: dffffc0000000000 R08: 0000000000000000 R09: fffff9400019dda8 [ 113.900589] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804622f7d0 [ 113.901113] R13: 00007f2b26da0000 R14: ffff88804622fad0 R15: 8000000033bb5007 [ 113.901665] ? arch_check_zapped_pte+0x5f/0xe0 [ 113.902019] ? arch_check_zapped_pte+0x5f/0xe0 [ 113.902376] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 113.902788] unmap_page_range+0xdca/0x36d0 [ 113.903127] ? lock_is_held_type+0x9e/0x120 [ 113.903501] ? __pfx_unmap_page_range+0x10/0x10 [ 113.903883] ? mas_next_slot+0x13cc/0x1ac0 [ 113.904237] ? uprobe_munmap+0x20/0x600 [ 113.904605] unmap_single_vma.constprop.0+0x153/0x230 [ 113.905024] unmap_vmas+0x1d6/0x430 [ 113.905327] ? __pfx_unmap_vmas+0x10/0x10 [ 113.905698] exit_mmap+0x181/0xaa0 [ 113.905993] ? uprobe_clear_state+0xfc/0x410 [ 113.906358] ? __pfx_exit_mmap+0x10/0x10 [ 113.906723] ? __pfx___mutex_lock+0x10/0x10 [ 113.907082] ? arch_uprobe_clear_state+0x16/0x140 [ 113.907509] mmput+0xd5/0x390 [ 113.907777] do_exit+0x79d/0x2970 [ 113.908049] ? lock_release+0xc8/0x290 [ 113.908354] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.908813] ? __pfx_do_exit+0x10/0x10 [ 113.909111] ? find_held_lock+0x2b/0x80 [ 113.909436] ? get_signal+0x835/0x2340 [ 113.909756] do_group_exit+0xd3/0x2a0 [ 113.910068] get_signal+0x2315/0x2340 [ 113.910369] ? __pfx_get_signal+0x10/0x10 [ 113.910709] ? do_futex+0x135/0x370 [ 113.910997] ? __pfx_do_futex+0x10/0x10 [ 113.911310] arch_do_signal_or_restart+0x80/0x790 [ 113.911731] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 113.912155] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.912617] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.913056] ? __pfx___x64_sys_futex+0x10/0x10 [ 113.913402] ? xfd_validate_state+0x55/0x180 [ 113.913768] exit_to_user_mode_loop+0x8b/0x110 [ 113.914112] do_syscall_64+0x2f7/0x360 [ 113.914424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.914810] RIP: 0033:0x7f2b2740bb19 [ 113.915088] Code: Unable to access opcode bytes at 0x7f2b2740baef. [ 113.915560] RSP: 002b:00007f2b24981218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.916118] RAX: fffffffffffffe00 RBX: 00007f2b2751ef68 RCX: 00007f2b2740bb19 [ 113.916665] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2b2751ef68 [ 113.917194] RBP: 00007f2b2751ef60 R08: 0000000000000000 R09: 0000000000000000 [ 113.917735] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b2751ef6c [ 113.918260] R13: 00007fff7471f30f R14: 00007f2b24981300 R15: 0000000000022000 [ 113.918810] [ 113.918991] irq event stamp: 1164 [ 113.919247] hardirqs last enabled at (1172): [] __up_console_sem+0x78/0x80 [ 113.919898] hardirqs last disabled at (1181): [] __up_console_sem+0x5d/0x80 [ 113.920556] softirqs last enabled at (318): [] handle_softirqs+0x50c/0x770 [ 113.921190] softirqs last disabled at (369): [] __irq_exit_rcu+0xc4/0x100 [ 113.921823] ---[ end trace 0000000000000000 ]--- [ 113.922172] percpu_ref_switch_to_atomic_rcu: percpu_ref_switch_to_atomic_rcu(): percpu_ref underflow slab kmalloc-64 start ffff888041c9bd00 pointer offset 0 size 64 [ 113.953128] kmemleak: Automatic memory scanning thread ended [ 114.769222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.770479] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 115.841484] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 115.843068] Bluetooth: hci0: hardware error 0xf7 [ 115.859813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.860448] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 115.874462] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.875286] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 115.890196] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.891092] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 115.901059] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 115.901938] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 115.914528] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 115.915372] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 115.930496] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 115.931331] Bluetooth: hci7: Error when powering off device on rfkill (-4) VM DIAGNOSIS: 08:38:28 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000100 RCX=ffffffff81b98698 RDX=ffff888017578000 RSI=ffffffff81b98663 RDI=0000000000000001 RBP=ffff888016357be0 RSP=ffff888016357b50 R8 =0000000000000001 R9 =ffffffff81b97d93 R10=0000000000000001 R11=0000000000000001 R12=ffff888016357cac R13=0000000000000d97 R14=ffff888016357c70 R15=0000000000000001 RIP=ffffffff81b98665 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555e4f1400 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d033000 CR3=0000000041890000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff000000000000ff0000000000ff00 XMM01=630033656e6f6c6300656e6f6c630065 XMM02=00010000000000000000000000000000 XMM03=ffffffff812c82b4ffffffff812c82b4 XMM04=ffffffff81209610ffffffff812095ec XMM05=ffffffff812095ecffffffff812095d0 XMM06=ffffffff812095d0ffffffff812095d0 XMM07=ffffffff81207bacffffffff8120790e XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff828e5070 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88804488f308 R8 =0000000000000000 R9 =ffffed10013ab046 R10=00000000000fe503 R11=0000000000000001 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e52a2 R15=dffffc0000000000 RIP=ffffffff828e50c5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000000000e CR3=000000003ee4f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000