Warning: Permanently added '[localhost]:40804' (ECDSA) to the list of known hosts. 2025/08/29 13:24:53 fuzzer started 2025/08/29 13:24:53 dialing manager at localhost:43077 syzkaller login: [ 51.077054] cgroup: Unknown subsys name 'net' [ 51.202113] cgroup: Unknown subsys name 'cpuset' [ 51.213202] cgroup: Unknown subsys name 'rlimit' 2025/08/29 13:25:03 syscalls: 2214 2025/08/29 13:25:03 code coverage: enabled 2025/08/29 13:25:03 comparison tracing: enabled 2025/08/29 13:25:03 extra coverage: enabled 2025/08/29 13:25:03 setuid sandbox: enabled 2025/08/29 13:25:03 namespace sandbox: enabled 2025/08/29 13:25:03 Android sandbox: enabled 2025/08/29 13:25:03 fault injection: enabled 2025/08/29 13:25:03 leak checking: enabled 2025/08/29 13:25:03 net packet injection: enabled 2025/08/29 13:25:03 net device setup: enabled 2025/08/29 13:25:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 13:25:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 13:25:03 USB emulation: enabled 2025/08/29 13:25:03 hci packet injection: enabled 2025/08/29 13:25:03 wifi device emulation: enabled 2025/08/29 13:25:03 802.15.4 emulation: enabled 2025/08/29 13:25:03 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 13:25:03 fetching corpus: 50, signal 17456/21155 (executing program) 2025/08/29 13:25:03 fetching corpus: 100, signal 27296/32551 (executing program) 2025/08/29 13:25:04 fetching corpus: 150, signal 35360/42017 (executing program) 2025/08/29 13:25:04 fetching corpus: 200, signal 43052/50952 (executing program) 2025/08/29 13:25:04 fetching corpus: 250, signal 49032/58150 (executing program) 2025/08/29 13:25:04 fetching corpus: 300, signal 54609/64851 (executing program) 2025/08/29 13:25:04 fetching corpus: 350, signal 61522/72682 (executing program) 2025/08/29 13:25:04 fetching corpus: 400, signal 63952/76317 (executing program) 2025/08/29 13:25:04 fetching corpus: 450, signal 68718/81989 (executing program) 2025/08/29 13:25:04 fetching corpus: 500, signal 72647/86821 (executing program) 2025/08/29 13:25:04 fetching corpus: 550, signal 75537/90621 (executing program) 2025/08/29 13:25:04 fetching corpus: 600, signal 79206/95039 (executing program) 2025/08/29 13:25:04 fetching corpus: 650, signal 82234/98837 (executing program) 2025/08/29 13:25:05 fetching corpus: 700, signal 84024/101567 (executing program) 2025/08/29 13:25:05 fetching corpus: 750, signal 86367/104670 (executing program) 2025/08/29 13:25:05 fetching corpus: 800, signal 88570/107590 (executing program) 2025/08/29 13:25:05 fetching corpus: 850, signal 89939/109826 (executing program) 2025/08/29 13:25:05 fetching corpus: 900, signal 91512/112241 (executing program) 2025/08/29 13:25:05 fetching corpus: 950, signal 92816/114320 (executing program) 2025/08/29 13:25:05 fetching corpus: 1000, signal 94447/116678 (executing program) 2025/08/29 13:25:05 fetching corpus: 1050, signal 96474/119342 (executing program) 2025/08/29 13:25:05 fetching corpus: 1100, signal 98049/121597 (executing program) 2025/08/29 13:25:05 fetching corpus: 1150, signal 100501/124542 (executing program) 2025/08/29 13:25:05 fetching corpus: 1200, signal 102496/127075 (executing program) 2025/08/29 13:25:06 fetching corpus: 1250, signal 104863/129839 (executing program) 2025/08/29 13:25:06 fetching corpus: 1300, signal 106224/131838 (executing program) 2025/08/29 13:25:06 fetching corpus: 1350, signal 107357/133583 (executing program) 2025/08/29 13:25:06 fetching corpus: 1400, signal 108484/135287 (executing program) 2025/08/29 13:25:06 fetching corpus: 1450, signal 109525/136930 (executing program) 2025/08/29 13:25:06 fetching corpus: 1500, signal 111299/139107 (executing program) 2025/08/29 13:25:06 fetching corpus: 1550, signal 112127/140537 (executing program) 2025/08/29 13:25:06 fetching corpus: 1600, signal 113251/142239 (executing program) 2025/08/29 13:25:06 fetching corpus: 1650, signal 114411/143846 (executing program) 2025/08/29 13:25:06 fetching corpus: 1700, signal 115424/145355 (executing program) 2025/08/29 13:25:07 fetching corpus: 1750, signal 116502/146948 (executing program) 2025/08/29 13:25:07 fetching corpus: 1800, signal 117415/148333 (executing program) 2025/08/29 13:25:07 fetching corpus: 1850, signal 118490/149864 (executing program) 2025/08/29 13:25:07 fetching corpus: 1900, signal 119861/151550 (executing program) 2025/08/29 13:25:07 fetching corpus: 1950, signal 121096/153092 (executing program) 2025/08/29 13:25:07 fetching corpus: 2000, signal 122148/154524 (executing program) 2025/08/29 13:25:07 fetching corpus: 2050, signal 123095/155893 (executing program) 2025/08/29 13:25:07 fetching corpus: 2100, signal 124221/157341 (executing program) 2025/08/29 13:25:07 fetching corpus: 2150, signal 125486/158878 (executing program) 2025/08/29 13:25:07 fetching corpus: 2200, signal 126609/160294 (executing program) 2025/08/29 13:25:07 fetching corpus: 2250, signal 127420/161466 (executing program) 2025/08/29 13:25:08 fetching corpus: 2300, signal 128112/162582 (executing program) 2025/08/29 13:25:08 fetching corpus: 2350, signal 129113/163854 (executing program) 2025/08/29 13:25:08 fetching corpus: 2400, signal 129819/164987 (executing program) 2025/08/29 13:25:08 fetching corpus: 2450, signal 130742/166187 (executing program) 2025/08/29 13:25:08 fetching corpus: 2500, signal 131576/167323 (executing program) 2025/08/29 13:25:08 fetching corpus: 2550, signal 132505/168493 (executing program) 2025/08/29 13:25:08 fetching corpus: 2600, signal 133809/169802 (executing program) 2025/08/29 13:25:08 fetching corpus: 2650, signal 135215/171162 (executing program) 2025/08/29 13:25:08 fetching corpus: 2700, signal 136461/172434 (executing program) 2025/08/29 13:25:08 fetching corpus: 2750, signal 137080/173450 (executing program) 2025/08/29 13:25:08 fetching corpus: 2800, signal 137701/174395 (executing program) 2025/08/29 13:25:08 fetching corpus: 2850, signal 138150/175255 (executing program) 2025/08/29 13:25:09 fetching corpus: 2900, signal 139086/176297 (executing program) 2025/08/29 13:25:09 fetching corpus: 2950, signal 139815/177224 (executing program) 2025/08/29 13:25:09 fetching corpus: 3000, signal 140393/178159 (executing program) 2025/08/29 13:25:09 fetching corpus: 3050, signal 140949/179012 (executing program) 2025/08/29 13:25:09 fetching corpus: 3100, signal 141321/179726 (executing program) 2025/08/29 13:25:09 fetching corpus: 3150, signal 141966/180565 (executing program) 2025/08/29 13:25:09 fetching corpus: 3200, signal 142594/181474 (executing program) 2025/08/29 13:25:09 fetching corpus: 3250, signal 143174/182255 (executing program) 2025/08/29 13:25:09 fetching corpus: 3300, signal 143877/183073 (executing program) 2025/08/29 13:25:09 fetching corpus: 3350, signal 144413/183813 (executing program) 2025/08/29 13:25:09 fetching corpus: 3400, signal 144914/184573 (executing program) 2025/08/29 13:25:10 fetching corpus: 3450, signal 145715/185477 (executing program) 2025/08/29 13:25:10 fetching corpus: 3500, signal 146372/186263 (executing program) 2025/08/29 13:25:10 fetching corpus: 3550, signal 146773/186945 (executing program) 2025/08/29 13:25:10 fetching corpus: 3600, signal 147511/187804 (executing program) 2025/08/29 13:25:10 fetching corpus: 3650, signal 148086/188536 (executing program) 2025/08/29 13:25:10 fetching corpus: 3700, signal 148535/189177 (executing program) 2025/08/29 13:25:10 fetching corpus: 3750, signal 150559/190177 (executing program) 2025/08/29 13:25:10 fetching corpus: 3800, signal 151024/190826 (executing program) 2025/08/29 13:25:10 fetching corpus: 3850, signal 151478/191430 (executing program) 2025/08/29 13:25:10 fetching corpus: 3900, signal 151874/192030 (executing program) 2025/08/29 13:25:10 fetching corpus: 3950, signal 152941/192764 (executing program) 2025/08/29 13:25:11 fetching corpus: 4000, signal 153603/193351 (executing program) 2025/08/29 13:25:11 fetching corpus: 4050, signal 154025/193957 (executing program) 2025/08/29 13:25:11 fetching corpus: 4100, signal 154355/194500 (executing program) 2025/08/29 13:25:11 fetching corpus: 4150, signal 154741/195060 (executing program) 2025/08/29 13:25:11 fetching corpus: 4200, signal 155131/195558 (executing program) 2025/08/29 13:25:11 fetching corpus: 4250, signal 155839/196113 (executing program) 2025/08/29 13:25:11 fetching corpus: 4300, signal 156251/196651 (executing program) 2025/08/29 13:25:11 fetching corpus: 4350, signal 156617/197240 (executing program) 2025/08/29 13:25:11 fetching corpus: 4400, signal 157257/197764 (executing program) 2025/08/29 13:25:11 fetching corpus: 4450, signal 157579/198289 (executing program) 2025/08/29 13:25:11 fetching corpus: 4500, signal 157945/198824 (executing program) 2025/08/29 13:25:12 fetching corpus: 4550, signal 158320/199297 (executing program) 2025/08/29 13:25:12 fetching corpus: 4600, signal 158726/199839 (executing program) 2025/08/29 13:25:12 fetching corpus: 4650, signal 159363/200318 (executing program) 2025/08/29 13:25:12 fetching corpus: 4700, signal 160132/200757 (executing program) 2025/08/29 13:25:12 fetching corpus: 4750, signal 160918/201319 (executing program) 2025/08/29 13:25:12 fetching corpus: 4800, signal 161280/201758 (executing program) 2025/08/29 13:25:12 fetching corpus: 4850, signal 161826/202193 (executing program) 2025/08/29 13:25:12 fetching corpus: 4900, signal 162207/202399 (executing program) 2025/08/29 13:25:12 fetching corpus: 4950, signal 162991/202435 (executing program) 2025/08/29 13:25:12 fetching corpus: 5000, signal 163401/202453 (executing program) 2025/08/29 13:25:12 fetching corpus: 5050, signal 163870/202458 (executing program) 2025/08/29 13:25:13 fetching corpus: 5100, signal 164485/202466 (executing program) 2025/08/29 13:25:13 fetching corpus: 5150, signal 165218/202483 (executing program) 2025/08/29 13:25:13 fetching corpus: 5200, signal 165563/202492 (executing program) 2025/08/29 13:25:13 fetching corpus: 5250, signal 165998/202496 (executing program) 2025/08/29 13:25:13 fetching corpus: 5300, signal 166341/202503 (executing program) 2025/08/29 13:25:13 fetching corpus: 5350, signal 166848/202504 (executing program) 2025/08/29 13:25:13 fetching corpus: 5400, signal 167210/202511 (executing program) 2025/08/29 13:25:13 fetching corpus: 5450, signal 167517/202533 (executing program) 2025/08/29 13:25:13 fetching corpus: 5500, signal 167972/202564 (executing program) 2025/08/29 13:25:13 fetching corpus: 5550, signal 168275/202570 (executing program) 2025/08/29 13:25:13 fetching corpus: 5600, signal 168697/202575 (executing program) 2025/08/29 13:25:14 fetching corpus: 5650, signal 169020/202586 (executing program) 2025/08/29 13:25:14 fetching corpus: 5700, signal 169370/202595 (executing program) 2025/08/29 13:25:14 fetching corpus: 5750, signal 169680/202641 (executing program) 2025/08/29 13:25:14 fetching corpus: 5800, signal 170013/202656 (executing program) 2025/08/29 13:25:14 fetching corpus: 5850, signal 170271/202656 (executing program) 2025/08/29 13:25:14 fetching corpus: 5900, signal 170570/202663 (executing program) 2025/08/29 13:25:14 fetching corpus: 5950, signal 170933/202667 (executing program) 2025/08/29 13:25:14 fetching corpus: 6000, signal 171312/202723 (executing program) 2025/08/29 13:25:14 fetching corpus: 6050, signal 171827/202727 (executing program) 2025/08/29 13:25:14 fetching corpus: 6100, signal 172311/202727 (executing program) 2025/08/29 13:25:14 fetching corpus: 6150, signal 172606/202734 (executing program) 2025/08/29 13:25:14 fetching corpus: 6200, signal 172850/202736 (executing program) 2025/08/29 13:25:15 fetching corpus: 6250, signal 173236/202749 (executing program) 2025/08/29 13:25:15 fetching corpus: 6300, signal 173724/202749 (executing program) 2025/08/29 13:25:15 fetching corpus: 6350, signal 174021/202765 (executing program) 2025/08/29 13:25:15 fetching corpus: 6400, signal 174309/202774 (executing program) 2025/08/29 13:25:15 fetching corpus: 6450, signal 174686/202780 (executing program) 2025/08/29 13:25:15 fetching corpus: 6500, signal 175410/202801 (executing program) 2025/08/29 13:25:15 fetching corpus: 6550, signal 175789/202823 (executing program) 2025/08/29 13:25:15 fetching corpus: 6600, signal 176033/202835 (executing program) 2025/08/29 13:25:15 fetching corpus: 6650, signal 176323/202840 (executing program) 2025/08/29 13:25:15 fetching corpus: 6700, signal 176552/202840 (executing program) 2025/08/29 13:25:15 fetching corpus: 6750, signal 177020/202845 (executing program) 2025/08/29 13:25:16 fetching corpus: 6800, signal 177288/202855 (executing program) 2025/08/29 13:25:16 fetching corpus: 6850, signal 177649/202857 (executing program) 2025/08/29 13:25:16 fetching corpus: 6900, signal 178009/202860 (executing program) 2025/08/29 13:25:16 fetching corpus: 6950, signal 178507/202864 (executing program) 2025/08/29 13:25:16 fetching corpus: 7000, signal 178777/202890 (executing program) 2025/08/29 13:25:16 fetching corpus: 7050, signal 179138/202898 (executing program) 2025/08/29 13:25:16 fetching corpus: 7100, signal 179522/202917 (executing program) 2025/08/29 13:25:16 fetching corpus: 7150, signal 179958/202939 (executing program) 2025/08/29 13:25:16 fetching corpus: 7200, signal 180181/202940 (executing program) 2025/08/29 13:25:16 fetching corpus: 7250, signal 180545/202940 (executing program) 2025/08/29 13:25:16 fetching corpus: 7300, signal 180790/202954 (executing program) 2025/08/29 13:25:17 fetching corpus: 7350, signal 181298/202982 (executing program) 2025/08/29 13:25:17 fetching corpus: 7400, signal 181590/203001 (executing program) 2025/08/29 13:25:17 fetching corpus: 7450, signal 181860/203002 (executing program) 2025/08/29 13:25:17 fetching corpus: 7500, signal 182319/203002 (executing program) 2025/08/29 13:25:17 fetching corpus: 7550, signal 182607/203012 (executing program) 2025/08/29 13:25:17 fetching corpus: 7600, signal 182879/203034 (executing program) 2025/08/29 13:25:17 fetching corpus: 7650, signal 183100/203040 (executing program) 2025/08/29 13:25:17 fetching corpus: 7700, signal 183452/203040 (executing program) 2025/08/29 13:25:17 fetching corpus: 7750, signal 183665/203044 (executing program) 2025/08/29 13:25:17 fetching corpus: 7800, signal 183943/203048 (executing program) 2025/08/29 13:25:18 fetching corpus: 7850, signal 184264/203049 (executing program) 2025/08/29 13:25:18 fetching corpus: 7900, signal 184543/203059 (executing program) 2025/08/29 13:25:18 fetching corpus: 7950, signal 184887/203060 (executing program) 2025/08/29 13:25:18 fetching corpus: 8000, signal 185064/203064 (executing program) 2025/08/29 13:25:18 fetching corpus: 8050, signal 185401/203066 (executing program) 2025/08/29 13:25:18 fetching corpus: 8100, signal 185647/203070 (executing program) 2025/08/29 13:25:18 fetching corpus: 8150, signal 185868/203085 (executing program) 2025/08/29 13:25:18 fetching corpus: 8200, signal 186129/203087 (executing program) 2025/08/29 13:25:18 fetching corpus: 8250, signal 186315/203098 (executing program) 2025/08/29 13:25:18 fetching corpus: 8300, signal 186509/203104 (executing program) 2025/08/29 13:25:18 fetching corpus: 8350, signal 186690/203105 (executing program) 2025/08/29 13:25:18 fetching corpus: 8400, signal 187178/203131 (executing program) 2025/08/29 13:25:19 fetching corpus: 8450, signal 187394/203136 (executing program) 2025/08/29 13:25:19 fetching corpus: 8500, signal 187810/203241 (executing program) 2025/08/29 13:25:19 fetching corpus: 8550, signal 188049/203251 (executing program) 2025/08/29 13:25:19 fetching corpus: 8600, signal 188195/203257 (executing program) 2025/08/29 13:25:19 fetching corpus: 8650, signal 188473/203260 (executing program) 2025/08/29 13:25:19 fetching corpus: 8700, signal 188701/203287 (executing program) 2025/08/29 13:25:19 fetching corpus: 8750, signal 189410/203293 (executing program) 2025/08/29 13:25:19 fetching corpus: 8800, signal 189650/203293 (executing program) 2025/08/29 13:25:19 fetching corpus: 8850, signal 190155/203302 (executing program) 2025/08/29 13:25:19 fetching corpus: 8900, signal 190433/203303 (executing program) 2025/08/29 13:25:19 fetching corpus: 8950, signal 190718/203315 (executing program) 2025/08/29 13:25:19 fetching corpus: 9000, signal 190978/203316 (executing program) 2025/08/29 13:25:20 fetching corpus: 9050, signal 191180/203318 (executing program) 2025/08/29 13:25:20 fetching corpus: 9100, signal 191400/203322 (executing program) 2025/08/29 13:25:20 fetching corpus: 9150, signal 191641/203325 (executing program) 2025/08/29 13:25:20 fetching corpus: 9200, signal 191957/203326 (executing program) 2025/08/29 13:25:20 fetching corpus: 9250, signal 192149/203330 (executing program) 2025/08/29 13:25:20 fetching corpus: 9300, signal 192379/203333 (executing program) 2025/08/29 13:25:20 fetching corpus: 9350, signal 192888/203334 (executing program) 2025/08/29 13:25:20 fetching corpus: 9400, signal 193080/203337 (executing program) 2025/08/29 13:25:20 fetching corpus: 9450, signal 193362/203354 (executing program) 2025/08/29 13:25:20 fetching corpus: 9500, signal 193592/203354 (executing program) 2025/08/29 13:25:20 fetching corpus: 9550, signal 193857/203355 (executing program) 2025/08/29 13:25:21 fetching corpus: 9600, signal 194146/203355 (executing program) 2025/08/29 13:25:21 fetching corpus: 9650, signal 194341/203364 (executing program) 2025/08/29 13:25:21 fetching corpus: 9700, signal 194579/203366 (executing program) 2025/08/29 13:25:21 fetching corpus: 9750, signal 194859/203368 (executing program) 2025/08/29 13:25:21 fetching corpus: 9800, signal 195178/203414 (executing program) 2025/08/29 13:25:21 fetching corpus: 9850, signal 195370/203423 (executing program) 2025/08/29 13:25:21 fetching corpus: 9900, signal 195898/203423 (executing program) 2025/08/29 13:25:21 fetching corpus: 9950, signal 196219/203423 (executing program) 2025/08/29 13:25:21 fetching corpus: 10000, signal 196400/203423 (executing program) 2025/08/29 13:25:21 fetching corpus: 10050, signal 196694/203424 (executing program) 2025/08/29 13:25:22 fetching corpus: 10100, signal 196911/203433 (executing program) 2025/08/29 13:25:22 fetching corpus: 10150, signal 197050/203434 (executing program) 2025/08/29 13:25:22 fetching corpus: 10200, signal 197257/203434 (executing program) 2025/08/29 13:25:22 fetching corpus: 10250, signal 197515/203442 (executing program) 2025/08/29 13:25:22 fetching corpus: 10300, signal 197754/203447 (executing program) 2025/08/29 13:25:22 fetching corpus: 10350, signal 197929/203451 (executing program) 2025/08/29 13:25:22 fetching corpus: 10400, signal 198265/203454 (executing program) 2025/08/29 13:25:22 fetching corpus: 10450, signal 198461/203459 (executing program) 2025/08/29 13:25:22 fetching corpus: 10500, signal 198608/203462 (executing program) 2025/08/29 13:25:23 fetching corpus: 10550, signal 198805/203480 (executing program) 2025/08/29 13:25:23 fetching corpus: 10600, signal 198988/203482 (executing program) 2025/08/29 13:25:23 fetching corpus: 10650, signal 199189/203491 (executing program) 2025/08/29 13:25:23 fetching corpus: 10700, signal 199361/203506 (executing program) 2025/08/29 13:25:23 fetching corpus: 10709, signal 199457/203507 (executing program) 2025/08/29 13:25:23 fetching corpus: 10709, signal 199457/203507 (executing program) 2025/08/29 13:25:25 starting 8 fuzzer processes 13:25:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180), 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 13:25:25 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x563f4844884d73e8, 0x4) 13:25:25 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mbind(&(0x7f0000e2e000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00007f6000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f00009a9000/0x2000)=nil, 0x2000) mlock(&(0x7f00007be000/0x2000)=nil, 0x2000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc0000f) 13:25:25 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 13:25:25 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) setrlimit(0x0, 0x0) [ 82.214955] audit: type=1400 audit(1756473925.211:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:25:25 executing program 4: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x23f2, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 13:25:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[{0x10}], 0x10}, 0x0) 13:25:25 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_mount(r0, 0x0, r1, 0x0, 0x66) [ 83.401468] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.404143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.405948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.409369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.411845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.422185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.434038] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.436209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.439772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.441955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.465160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.467363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.469883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.484187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.486140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.489818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.491161] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.493048] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.494213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.496094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.500178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.501447] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.503765] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.511998] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.513586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.529107] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.532255] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.548917] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.554215] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.561899] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.570730] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.574216] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.579158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.580725] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.603798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.606435] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.615467] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.618228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.620906] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.623474] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.491434] Bluetooth: hci0: command tx timeout [ 85.491818] Bluetooth: hci1: command tx timeout [ 85.554800] Bluetooth: hci2: command tx timeout [ 85.555339] Bluetooth: hci3: command tx timeout [ 85.619799] Bluetooth: hci4: command tx timeout [ 85.682735] Bluetooth: hci6: command tx timeout [ 85.682947] Bluetooth: hci5: command tx timeout [ 85.683270] Bluetooth: hci7: command tx timeout [ 87.538779] Bluetooth: hci1: command tx timeout [ 87.539251] Bluetooth: hci0: command tx timeout [ 87.602646] Bluetooth: hci3: command tx timeout [ 87.603112] Bluetooth: hci2: command tx timeout [ 87.667045] Bluetooth: hci4: command tx timeout [ 87.730678] Bluetooth: hci7: command tx timeout [ 87.731151] Bluetooth: hci5: command tx timeout [ 87.731960] Bluetooth: hci6: command tx timeout [ 89.586646] Bluetooth: hci0: command tx timeout [ 89.586918] Bluetooth: hci1: command tx timeout [ 89.650745] Bluetooth: hci3: command tx timeout [ 89.650893] Bluetooth: hci2: command tx timeout [ 89.714689] Bluetooth: hci4: command tx timeout [ 89.778713] Bluetooth: hci6: command tx timeout [ 89.778746] Bluetooth: hci5: command tx timeout [ 89.779129] Bluetooth: hci7: command tx timeout [ 91.635672] Bluetooth: hci1: command tx timeout [ 91.636672] Bluetooth: hci0: command tx timeout [ 91.698621] Bluetooth: hci3: command tx timeout [ 91.699586] Bluetooth: hci2: command tx timeout [ 91.762740] Bluetooth: hci4: command tx timeout [ 91.827605] Bluetooth: hci5: command tx timeout [ 91.827631] Bluetooth: hci6: command tx timeout [ 91.828008] Bluetooth: hci7: command tx timeout [ 119.255775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.256455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.409687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.410305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.813374] audit: type=1400 audit(1756473962.807:8): avc: denied { open } for pid=3775 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.821166] audit: type=1400 audit(1756473962.807:9): avc: denied { kernel } for pid=3775 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.883632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.884243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.027147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.027795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.665164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.665764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.705311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.705906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.744289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.744849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.804641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.805202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.885098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.886342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.936974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.937574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.014282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.015001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.077949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.078616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.176344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.177147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.230024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.230666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.278617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.279200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.321718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.322317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:26:04 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_mount(r0, 0x0, r1, 0x0, 0x66) 13:26:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000000)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@empty}}}, [@policy_type={0xa}]}, 0xcc}}, 0x0) 13:26:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000080)="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", 0xa40) 13:26:04 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[{0x10}], 0x10}, 0x0) 13:26:04 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x1) syz_open_pts(r1, 0xc0080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000002c0)={0x40, 0x5, 0x7, 0x80000001, 0x1, [{0xc4f, 0x7, 0xa, '\x00', 0x4}]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') sendfile(r0, r3, 0x0, 0xa0103) 13:26:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180), 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 13:26:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, 0x0, 0x0) 13:26:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 13:26:04 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[{0x10}], 0x10}, 0x0) 13:26:04 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_mount(r0, 0x0, r1, 0x0, 0x66) 13:26:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000000)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@empty}}}, [@policy_type={0xa}]}, 0xcc}}, 0x0) 13:26:04 executing program 3: openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)={0x0, 0x0, 0x9}, 0x18) 13:26:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180), 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 13:26:04 executing program 7: r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 13:26:04 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_mount(r0, 0x0, r1, 0x0, 0x66) 13:26:04 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x600, 0x0) 13:26:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, 0x0, 0x0) 13:26:04 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[{0x10}], 0x10}, 0x0) 13:26:04 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 13:26:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180), 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 13:26:04 executing program 7: r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 13:26:04 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) 13:26:04 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 13:26:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, 0x0, 0x0) 13:26:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000000)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@empty}}}, [@policy_type={0xa}]}, 0xcc}}, 0x0) 13:26:04 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1f}, 0x0, 0x0, 0x0) 13:26:04 executing program 7: r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 13:26:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 13:26:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000000)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@empty}}}, [@policy_type={0xa}]}, 0xcc}}, 0x0) 13:26:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000002c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev}, {@in6=@local, 0x0, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) 13:26:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r1, 0xb341daa0822653b3, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}]}]}, 0x24}}, 0x0) 13:26:04 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ec3ba1", 0x0, 0x3c, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) 13:26:04 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) 13:26:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, 0x0, 0x0) 13:26:04 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/kexec_loaded', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/175, 0xaf) 13:26:04 executing program 7: r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 13:26:05 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}}) 13:26:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0x4}, @nested={0x4, 0x14}]}, 0x24}], 0x1}, 0x0) 13:26:05 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 13:26:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) 13:26:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 13:26:05 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNXCL(r0, 0x540d) 13:26:05 executing program 4: ioprio_set$pid(0x2, 0x0, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') pread64(r0, 0x0, 0x0, 0x0) [ 122.112762] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.169365] kmemleak: Found object by alias at 0x607f1a6399f0 [ 122.169386] CPU: 0 UID: 0 PID: 3985 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 122.169405] Tainted: [W]=WARN [ 122.169409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.169416] Call Trace: [ 122.169421] [ 122.169426] dump_stack_lvl+0xca/0x120 [ 122.169454] __lookup_object+0x94/0xb0 [ 122.169472] delete_object_full+0x27/0x70 [ 122.169488] free_percpu+0x30/0x1160 [ 122.169505] ? arch_uprobe_clear_state+0x16/0x140 [ 122.169525] futex_hash_free+0x38/0xc0 [ 122.169546] mmput+0x2d3/0x390 [ 122.169565] do_exit+0x79d/0x2970 [ 122.169583] ? __pfx_do_exit+0x10/0x10 [ 122.169597] ? find_held_lock+0x2b/0x80 [ 122.169614] ? get_signal+0x835/0x2340 [ 122.169634] do_group_exit+0xd3/0x2a0 [ 122.169649] get_signal+0x2315/0x2340 [ 122.169666] ? put_task_stack+0xd2/0x240 [ 122.169680] ? __pfx_get_signal+0x10/0x10 [ 122.169696] ? __schedule+0xe91/0x3590 [ 122.169716] arch_do_signal_or_restart+0x80/0x790 [ 122.169734] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.169750] ? __x64_sys_futex+0x1c9/0x4d0 [ 122.169762] ? __x64_sys_futex+0x1d2/0x4d0 [ 122.169776] ? __sys_socket+0x9f/0x260 [ 122.169791] ? __pfx___x64_sys_futex+0x10/0x10 [ 122.169804] ? xfd_validate_state+0x55/0x180 [ 122.169825] exit_to_user_mode_loop+0x8b/0x110 [ 122.169838] do_syscall_64+0x2f7/0x360 [ 122.169850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.169863] RIP: 0033:0x7f4ba2e36b19 [ 122.169871] Code: Unable to access opcode bytes at 0x7f4ba2e36aef. [ 122.169877] RSP: 002b:00007f4ba03ac218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.169888] RAX: 0000000000000001 RBX: 00007f4ba2f49f68 RCX: 00007f4ba2e36b19 [ 122.169896] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ba2f49f6c [ 122.169903] RBP: 00007f4ba2f49f60 R08: 000000000000000e R09: 0000000000000000 [ 122.169910] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4ba2f49f6c [ 122.169917] R13: 00007ffc21c6cd7f R14: 00007f4ba03ac300 R15: 0000000000022000 [ 122.169933] [ 122.169937] kmemleak: Object (percpu) 0x607f1a6399ec (size 8): [ 122.169944] kmemleak: comm "syz-executor.0", pid 3983, jiffies 4294788951 [ 122.169951] kmemleak: min_count = 1 [ 122.169954] kmemleak: count = 0 [ 122.169958] kmemleak: flags = 0x21 [ 122.169962] kmemleak: checksum = 0 [ 122.169966] kmemleak: backtrace: [ 122.169969] pcpu_alloc_noprof+0x87a/0x1170 [ 122.169984] alloc_vfsmnt+0x135/0x6e0 [ 122.169998] clone_mnt+0x6c/0xb70 [ 122.170012] copy_tree+0x105/0xaf0 [ 122.170021] copy_mnt_ns+0x1ab/0xab0 [ 122.170032] create_new_namespaces+0xd6/0xab0 [ 122.170048] copy_namespaces+0x45c/0x580 [ 122.170063] copy_process+0x2649/0x73c0 [ 122.170073] kernel_clone+0xea/0x7f0 [ 122.170083] __do_sys_clone3+0x1f5/0x280 [ 122.170093] do_syscall_64+0xbf/0x360 [ 122.170101] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:26:05 executing program 4: ioprio_set$pid(0x2, 0x0, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') pread64(r0, 0x0, 0x0, 0x0) 13:26:05 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) ioctl$CDROMRESUME(r0, 0x125f) 13:26:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000100)="889f", 0x2}], 0x1}, 0x48d0) [ 122.286787] ------------[ cut here ]------------ [ 122.287203] WARNING: fs/namespace.c:1375 at cleanup_mnt+0x33f/0x430, CPU#1: syz-executor.0/33022 [ 122.287979] Modules linked in: [ 122.288315] CPU: 1 UID: 0 PID: 33022 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 122.290562] Tainted: [W]=WARN [ 122.291192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.293063] RIP: 0010:cleanup_mnt+0x33f/0x430 [ 122.294386] Code: c7 a0 45 d1 85 e8 01 7c fa 02 49 8d 7d 40 5b 48 c7 c6 10 e2 be 81 5d 41 5c 41 5d 41 5e 41 5f e9 57 b3 9c ff e8 82 46 b4 ff 90 <0f> 0b 90 e9 e6 fc ff ff e8 74 46 b4 ff 4c 89 ef e8 6c d7 06 00 e9 [ 122.297500] RSP: 0018:ffff888048c27af8 EFLAGS: 00010293 [ 122.298053] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81bf9de5 [ 122.298811] RDX: ffff8880475c1b80 RSI: ffffffff81bfa0fe RDI: 0000000000000005 [ 122.299372] RBP: ffff88801f350740 R08: 0000000000000000 R09: 0000000000000001 [ 122.300034] R10: 0000000000000001 R11: ffff88801d32b030 R12: ffff8880475c2458 [ 122.300620] R13: ffff88801f350540 R14: 0000000000000001 R15: ffff88801f350580 [ 122.301189] FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 122.301829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.302296] CR2: 00007f8520398718 CR3: 000000003f433000 CR4: 0000000000350ef0 [ 122.302872] Call Trace: [ 122.303082] [ 122.303268] task_work_run+0x172/0x280 [ 122.303608] ? __pfx_task_work_run+0x10/0x10 [ 122.303970] do_exit+0x846/0x2970 [ 122.304260] ? proc_coredump_connector+0x2bf/0x4e0 [ 122.304676] ? __pfx_do_exit+0x10/0x10 [ 122.304989] ? find_held_lock+0x2b/0x80 [ 122.305315] ? get_signal+0x1a05/0x2340 [ 122.305659] do_group_exit+0xd3/0x2a0 [ 122.305970] get_signal+0x2315/0x2340 [ 122.306291] ? __pfx_get_signal+0x10/0x10 [ 122.306658] ? force_sig_fault+0xb4/0xf0 [ 122.306988] ? __pfx_force_sig_fault+0x10/0x10 [ 122.307359] arch_do_signal_or_restart+0x80/0x790 [ 122.307768] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.308204] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 122.308601] irqentry_exit_to_user_mode+0x106/0x1c0 [ 122.309007] exc_page_fault+0xd9/0x180 [ 122.309322] asm_exc_page_fault+0x26/0x30 [ 122.309671] RIP: 0033:0x0 [ 122.309895] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 122.310408] RSP: 002b:000000002000021c EFLAGS: 00010217 [ 122.310842] RAX: 0000000000000000 RBX: 00007f8522f56f60 RCX: 00007f8522e43b19 [ 122.311403] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 122.311981] RBP: 00007f8522e9df6d R08: 0000000000000000 R09: 0000000000000000 [ 122.312556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.313109] R13: 00007fff03ce165f R14: 00007f85203b9300 R15: 0000000000022000 [ 122.313691] [ 122.313882] irq event stamp: 1159 [ 122.314163] hardirqs last enabled at (1167): [] __up_console_sem+0x78/0x80 [ 122.314853] hardirqs last disabled at (1176): [] __up_console_sem+0x5d/0x80 [ 122.315519] softirqs last enabled at (1000): [] handle_softirqs+0x50c/0x770 [ 122.316216] softirqs last disabled at (995): [] __irq_exit_rcu+0xc4/0x100 [ 122.316886] ---[ end trace 0000000000000000 ]--- 13:26:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) 13:26:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:26:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000100)="889f", 0x2}], 0x1}, 0x48d0) 13:26:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000002640)=""/100, 0x8001, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x0) 13:26:05 executing program 4: ioprio_set$pid(0x2, 0x0, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') pread64(r0, 0x0, 0x0, 0x0) 13:26:05 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) 13:26:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 13:26:05 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 13:26:05 executing program 4: ioprio_set$pid(0x2, 0x0, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') pread64(r0, 0x0, 0x0, 0x0) 13:26:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000100)="889f", 0x2}], 0x1}, 0x48d0) [ 122.525943] kmemleak: Found object by alias at 0x607f1a639f28 [ 122.525965] CPU: 1 UID: 0 PID: 4013 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 122.525983] Tainted: [W]=WARN [ 122.525986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.525994] Call Trace: [ 122.525998] [ 122.526002] dump_stack_lvl+0xca/0x120 [ 122.526029] __lookup_object+0x94/0xb0 [ 122.526046] delete_object_full+0x27/0x70 [ 122.526062] free_percpu+0x30/0x1160 [ 122.526078] ? arch_uprobe_clear_state+0x16/0x140 [ 122.526097] futex_hash_free+0x38/0xc0 [ 122.526121] mmput+0x2d3/0x390 [ 122.526139] do_exit+0x79d/0x2970 [ 122.526153] ? lock_release+0xc8/0x290 [ 122.526170] ? __pfx_do_exit+0x10/0x10 [ 122.526183] ? find_held_lock+0x2b/0x80 [ 122.526200] ? get_signal+0x835/0x2340 [ 122.526220] do_group_exit+0xd3/0x2a0 [ 122.526235] get_signal+0x2315/0x2340 [ 122.526254] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 122.526271] ? __pfx_get_signal+0x10/0x10 [ 122.526286] ? do_futex+0x135/0x370 [ 122.526300] ? __pfx_do_futex+0x10/0x10 [ 122.526315] arch_do_signal_or_restart+0x80/0x790 [ 122.526336] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.526352] ? __x64_sys_futex+0x1c9/0x4d0 [ 122.526364] ? __x64_sys_futex+0x1d2/0x4d0 [ 122.526378] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 122.526398] ? __pfx___x64_sys_futex+0x10/0x10 [ 122.526410] ? __pfx_fput_close_sync+0x10/0x10 [ 122.526426] ? dnotify_flush+0x79/0x4c0 [ 122.526441] exit_to_user_mode_loop+0x8b/0x110 [ 122.526454] do_syscall_64+0x2f7/0x360 [ 122.526466] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:26:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) [ 122.526478] RIP: 0033:0x7fc657467b19 [ 122.526487] Code: Unable to access opcode bytes at 0x7fc657467aef. [ 122.526492] RSP: 002b:00007fc6549dd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.526503] RAX: fffffffffffffe00 RBX: 00007fc65757af68 RCX: 00007fc657467b19 [ 122.526511] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc65757af68 [ 122.526518] RBP: 00007fc65757af60 R08: 0000000000000000 R09: 0000000000000000 [ 122.526524] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc65757af6c [ 122.526531] R13: 00007fff33db29df R14: 00007fc6549dd300 R15: 0000000000022000 [ 122.526547] [ 122.526551] kmemleak: Object (percpu) 0x607f1a639f24 (size 8): [ 122.526557] kmemleak: comm "syz-executor.0", pid 4019, jiffies 4294789343 [ 122.526564] kmemleak: min_count = 1 [ 122.526568] kmemleak: count = 0 [ 122.526572] kmemleak: flags = 0x21 [ 122.526575] kmemleak: checksum = 0 [ 122.526579] kmemleak: backtrace: [ 122.526583] pcpu_alloc_noprof+0x87a/0x1170 [ 122.526597] alloc_vfsmnt+0x135/0x6e0 [ 122.526610] clone_mnt+0x6c/0xb70 [ 122.526624] copy_tree+0x34b/0xaf0 [ 122.526634] copy_mnt_ns+0x1ab/0xab0 [ 122.526644] create_new_namespaces+0xd6/0xab0 [ 122.526660] copy_namespaces+0x45c/0x580 [ 122.526675] copy_process+0x2649/0x73c0 [ 122.526685] kernel_clone+0xea/0x7f0 [ 122.526694] __do_sys_clone3+0x1f5/0x280 [ 122.526704] do_syscall_64+0xbf/0x360 [ 122.526713] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:26:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000100)="889f", 0x2}], 0x1}, 0x48d0) [ 122.614296] ------------[ cut here ]------------ [ 122.615025] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#0: syz-executor.0/33022 [ 122.615893] Modules linked in: [ 122.616326] CPU: 0 UID: 0 PID: 33022 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 122.617354] Tainted: [W]=WARN [ 122.617711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.618346] RIP: 0010:mntput_no_expire+0x78e/0xbe0 [ 122.618856] Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b [ 122.620360] RSP: 0018:ffff88804829f9b8 EFLAGS: 00010293 [ 122.620884] RAX: 0000000000000000 RBX: 1ffff11009053f3c RCX: ffffffff81bf96d3 [ 122.621427] RDX: ffff8880482c0000 RSI: ffffffff81bf96dd RDI: 0000000000000005 [ 122.622102] RBP: ffff88800dfd3500 R08: 0000000000000001 R09: 0000000000000000 [ 122.622670] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88804829fa20 [ 122.623210] R13: 00000000ffffffff R14: dead000000000100 R15: ffff88800dfd3500 [ 122.623768] FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 122.624375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.624837] CR2: 00007f045d9ff098 CR3: 00000000465fa000 CR4: 0000000000350ef0 [ 122.625377] Call Trace: [ 122.625600] [ 122.625786] ? __pfx_mntput_no_expire+0x10/0x10 [ 122.626166] ? __virt_addr_valid+0x100/0x5d0 [ 122.626520] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 122.626908] ? shrink_dentry_list+0x1a/0x650 [ 122.627259] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 122.627710] namespace_unlock+0x7f1/0x810 [ 122.628041] ? __pfx_namespace_unlock+0x10/0x10 [ 122.628406] ? find_held_lock+0x2b/0x80 [ 122.628742] ? lock_release+0xc8/0x290 [ 122.629071] put_mnt_ns+0xf5/0x120 [ 122.629384] free_nsproxy+0x3a/0x400 [ 122.629735] switch_task_namespaces+0xe2/0x100 [ 122.630139] do_exit+0x841/0x2970 [ 122.630449] ? proc_coredump_connector+0x2bf/0x4e0 [ 122.630895] ? __pfx_do_exit+0x10/0x10 [ 122.631229] ? find_held_lock+0x2b/0x80 [ 122.631600] ? get_signal+0x1a05/0x2340 [ 122.631951] do_group_exit+0xd3/0x2a0 [ 122.632280] get_signal+0x2315/0x2340 [ 122.632643] ? __pfx_get_signal+0x10/0x10 [ 122.633005] ? force_sig_fault+0xb4/0xf0 [ 122.633357] ? __pfx_force_sig_fault+0x10/0x10 [ 122.633770] arch_do_signal_or_restart+0x80/0x790 [ 122.634160] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.634632] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 122.635020] irqentry_exit_to_user_mode+0x106/0x1c0 [ 122.635442] exc_page_fault+0xd9/0x180 [ 122.635792] asm_exc_page_fault+0x26/0x30 [ 122.636135] RIP: 0033:0x0 [ 122.636367] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 122.636908] RSP: 002b:000000002000021c EFLAGS: 00010217 [ 122.637342] RAX: 0000000000000000 RBX: 00007f8522f56f60 RCX: 00007f8522e43b19 [ 122.637935] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 122.638521] RBP: 00007f8522e9df6d R08: 0000000000000000 R09: 0000000000000000 [ 122.639114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.639709] R13: 00007fff03ce165f R14: 00007f85203b9300 R15: 0000000000022000 [ 122.640278] [ 122.640474] irq event stamp: 1037 [ 122.640780] hardirqs last enabled at (1047): [] __up_console_sem+0x78/0x80 [ 122.641490] hardirqs last disabled at (1054): [] __up_console_sem+0x5d/0x80 [ 122.642227] softirqs last enabled at (696): [] handle_softirqs+0x50c/0x770 [ 122.642952] softirqs last disabled at (691): [] __irq_exit_rcu+0xc4/0x100 [ 122.643660] ---[ end trace 0000000000000000 ]--- 13:26:05 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) 13:26:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0xfffffffffffffffe) 13:26:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=@getae={0x40, 0x1f, 0x1, 0x0, 0x0, {{@in=@private, 0x0, 0x2}}}, 0x40}}, 0x0) 13:26:05 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) 13:26:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) 13:26:05 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x40085203, &(0x7f0000001800)) 13:26:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 13:26:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x49b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4db, 0x4) 13:26:05 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) 13:26:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}}], 0x1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)=0x40) 13:26:05 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 13:26:05 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 13:26:05 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) pidfd_open(0x0, 0x0) 13:26:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x42, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\x00']}, 0x14}], 0x1}, 0x0) 13:26:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}}], 0x1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)=0x40) 13:26:05 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x0, 0x2, 0x1, 0x9, 0x0, [@rand_addr=' \x01\x00']}]}}}}}, 0x0) 13:26:05 executing program 7: syz_mount_image$nfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="01"]) 13:26:05 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000140), 0x0) 13:26:05 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) pidfd_open(0x0, 0x0) 13:26:05 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 13:26:05 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x0, 0x2, 0x1, 0x9, 0x0, [@rand_addr=' \x01\x00']}]}}}}}, 0x0) 13:26:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x49b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4db, 0x4) 13:26:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}}], 0x1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)=0x40) 13:26:06 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) pidfd_open(0x0, 0x0) 13:26:06 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000140), 0x0) 13:26:06 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 13:26:06 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x0, 0x2, 0x1, 0x9, 0x0, [@rand_addr=' \x01\x00']}]}}}}}, 0x0) 13:26:06 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 13:26:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x49b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4db, 0x4) 13:26:06 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) [ 123.106729] kmemleak: Found object by alias at 0x607f1a639f28 [ 123.106751] CPU: 0 UID: 0 PID: 4078 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 123.106769] Tainted: [W]=WARN [ 123.106774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.106781] Call Trace: [ 123.106785] [ 123.106790] dump_stack_lvl+0xca/0x120 [ 123.106819] __lookup_object+0x94/0xb0 [ 123.106837] delete_object_full+0x27/0x70 [ 123.106853] free_percpu+0x30/0x1160 [ 123.106870] ? arch_uprobe_clear_state+0x16/0x140 [ 123.106890] futex_hash_free+0x38/0xc0 [ 123.106905] mmput+0x2d3/0x390 [ 123.106924] do_exit+0x79d/0x2970 [ 123.106938] ? signal_wake_up_state+0x85/0x120 [ 123.106954] ? zap_other_threads+0x2b9/0x3a0 [ 123.106970] ? __pfx_do_exit+0x10/0x10 [ 123.106983] ? do_group_exit+0x1c3/0x2a0 [ 123.106996] ? lock_release+0xc8/0x290 [ 123.107013] do_group_exit+0xd3/0x2a0 [ 123.107028] __x64_sys_exit_group+0x3e/0x50 [ 123.107042] x64_sys_call+0x18c5/0x18d0 [ 123.107058] do_syscall_64+0xbf/0x360 [ 123.107070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.107081] RIP: 0033:0x7fc657467b19 [ 123.107090] Code: Unable to access opcode bytes at 0x7fc657467aef. [ 123.107096] RSP: 002b:00007fff33db2c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 123.107107] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fc657467b19 [ 123.107115] RDX: 00007fc65741a72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 123.107122] RBP: 0000000000000000 R08: 0000001b2d422df8 R09: 0000000000000000 [ 123.107129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.107136] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff33db2cf0 [ 123.107151] [ 123.107155] kmemleak: Object (percpu) 0x607f1a639f24 (size 8): [ 123.107162] kmemleak: comm "syz-executor.0", pid 4084, jiffies 4294789903 [ 123.107169] kmemleak: min_count = 1 [ 123.107173] kmemleak: count = 0 [ 123.107176] kmemleak: flags = 0x21 [ 123.107180] kmemleak: checksum = 0 [ 123.107184] kmemleak: backtrace: [ 123.107188] pcpu_alloc_noprof+0x87a/0x1170 [ 123.107202] alloc_vfsmnt+0x135/0x6e0 [ 123.107216] clone_mnt+0x6c/0xb70 [ 123.107230] copy_tree+0x34b/0xaf0 [ 123.107240] copy_mnt_ns+0x1ab/0xab0 [ 123.107250] create_new_namespaces+0xd6/0xab0 [ 123.107267] copy_namespaces+0x45c/0x580 [ 123.107281] copy_process+0x2649/0x73c0 [ 123.107291] kernel_clone+0xea/0x7f0 [ 123.107300] __do_sys_clone3+0x1f5/0x280 [ 123.107310] do_syscall_64+0xbf/0x360 [ 123.107319] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:26:06 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 13:26:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}}], 0x1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)=0x40) 13:26:06 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000140), 0x0) 13:26:06 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x0, 0x2, 0x1, 0x9, 0x0, [@rand_addr=' \x01\x00']}]}}}}}, 0x0) 13:26:06 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) pidfd_open(0x0, 0x0) 13:26:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x49b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4db, 0x4) 13:26:06 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 13:26:06 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 13:26:06 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000140), 0x0) 13:26:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x4, r2}, 0x14) 13:26:06 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file1\x00') 13:26:06 executing program 1: ptrace(0x4206, 0x1) wait4(0x0, 0x0, 0x0, 0x0) 13:26:06 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f0000000bc0)) 13:26:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:26:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0, 0x0) 13:26:06 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5603, &(0x7f0000000000)) 13:26:06 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000240)='./file0\x00', r0, 0xffffffffffffffff) chmod(&(0x7f0000000200)='./file0\x00', 0x0) 13:26:06 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file1\x00') 13:26:06 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file1\x00') 13:26:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:26:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0b783311dce8"}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) 13:26:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000640)=ANY=[@ANYBLOB="0006"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 13:26:06 executing program 7: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000) fcntl$setstatus(r0, 0x4, 0x6800) truncate(&(0x7f0000000100)='./file0\x00', 0xe) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x1a) 13:26:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0, 0x0) 13:26:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:26:06 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file1\x00') [ 123.556030] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted [ 123.628099] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 13:26:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x2e) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 13:26:06 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file1\x00') 13:26:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0b783311dce8"}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) 13:26:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x30, r1, 0xb341daa0822653b3, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xfffffffffffffee3, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x30}}, 0x0) 13:26:06 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file1\x00') 13:26:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0, 0x0) 13:26:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000640)=ANY=[@ANYBLOB="0006"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 13:26:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:26:06 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file1\x00') [ 123.727055] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted [ 123.761136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. 13:26:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0, 0x0) [ 123.777760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. 13:26:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000640)=ANY=[@ANYBLOB="0006"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 13:26:06 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000280)="0fa1ef837cdc69f9724030b98d007e16dd33fc3ff52b92e803e3ff13f6442ba769f6c9c8e7fb10094148206c2d6e9dd5b49f7693b54e1fa8411aa98cc9353518cdd9085c4a2e3f65079657c5a37a132664c29305f79f8ecbcd59365f39bae789706a65f922eeb50fad942eca76af0c2c9599b1a72f235193019de6166d1de79a22c98260091d86c5d1f12a8e6d905c301d", 0x91}], 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) 13:26:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@remote}, {@in6=@private2, 0x0, 0x2b}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-generic\x00'}}}]}, 0x13c}}, 0x0) 13:26:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x30, r1, 0xb341daa0822653b3, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xfffffffffffffee3, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x30}}, 0x0) 13:26:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_adj\x00') write$P9_RREAD(r0, 0x0, 0x97) 13:26:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0b783311dce8"}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) 13:26:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x2f0, 0x4) 13:26:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140), 0x4) getsockname(r0, 0x0, &(0x7f0000000200)) [ 123.958039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. [ 123.964381] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 13:26:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@remote}, {@in6=@private2, 0x0, 0x2b}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-generic\x00'}}}]}, 0x13c}}, 0x0) 13:26:06 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000100)=@FILEID_UDF_WITHOUT_PARENT={0xc}, 0x0) 13:26:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) tee(r0, r1, 0x800000000000, 0x0) 13:26:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x30, r1, 0xb341daa0822653b3, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xfffffffffffffee3, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x30}}, 0x0) 13:26:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0b783311dce8"}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) 13:26:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000640)=ANY=[@ANYBLOB="0006"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 13:26:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140), 0x4) getsockname(r0, 0x0, &(0x7f0000000200)) 13:26:07 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000280)="0fa1ef837cdc69f9724030b98d007e16dd33fc3ff52b92e803e3ff13f6442ba769f6c9c8e7fb10094148206c2d6e9dd5b49f7693b54e1fa8411aa98cc9353518cdd9085c4a2e3f65079657c5a37a132664c29305f79f8ecbcd59365f39bae789706a65f922eeb50fad942eca76af0c2c9599b1a72f235193019de6166d1de79a22c98260091d86c5d1f12a8e6d905c301d", 0x91}], 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) 13:26:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@remote}, {@in6=@private2, 0x0, 0x2b}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-generic\x00'}}}]}, 0x13c}}, 0x0) [ 124.101071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. 13:26:07 executing program 5: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000280)="0fa1ef837cdc69f9724030b98d007e16dd33fc3ff52b92e803e3ff13f6442ba769f6c9c8e7fb10094148206c2d6e9dd5b49f7693b54e1fa8411aa98cc9353518cdd9085c4a2e3f65079657c5a37a132664c29305f79f8ecbcd59365f39bae789706a65f922eeb50fad942eca76af0c2c9599b1a72f235193019de6166d1de79a22c98260091d86c5d1f12a8e6d905c301d", 0x91}], 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) [ 124.120279] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 13:26:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x30, r1, 0xb341daa0822653b3, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xfffffffffffffee3, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x30}}, 0x0) 13:26:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000000140), 0x3, 0x0) 13:26:07 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000280)="0fa1ef837cdc69f9724030b98d007e16dd33fc3ff52b92e803e3ff13f6442ba769f6c9c8e7fb10094148206c2d6e9dd5b49f7693b54e1fa8411aa98cc9353518cdd9085c4a2e3f65079657c5a37a132664c29305f79f8ecbcd59365f39bae789706a65f922eeb50fad942eca76af0c2c9599b1a72f235193019de6166d1de79a22c98260091d86c5d1f12a8e6d905c301d", 0x91}], 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) 13:26:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140), 0x4) getsockname(r0, 0x0, &(0x7f0000000200)) 13:26:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@remote}, {@in6=@private2, 0x0, 0x2b}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-generic\x00'}}}]}, 0x13c}}, 0x0) 13:26:07 executing program 5: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000280)="0fa1ef837cdc69f9724030b98d007e16dd33fc3ff52b92e803e3ff13f6442ba769f6c9c8e7fb10094148206c2d6e9dd5b49f7693b54e1fa8411aa98cc9353518cdd9085c4a2e3f65079657c5a37a132664c29305f79f8ecbcd59365f39bae789706a65f922eeb50fad942eca76af0c2c9599b1a72f235193019de6166d1de79a22c98260091d86c5d1f12a8e6d905c301d", 0x91}], 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) 13:26:07 executing program 3: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:26:07 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x15}) [ 124.276467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. [ 124.286471] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 21 (only 16 groups) 13:26:07 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x0, 0x1, 'G'}) 13:26:07 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000280)="0fa1ef837cdc69f9724030b98d007e16dd33fc3ff52b92e803e3ff13f6442ba769f6c9c8e7fb10094148206c2d6e9dd5b49f7693b54e1fa8411aa98cc9353518cdd9085c4a2e3f65079657c5a37a132664c29305f79f8ecbcd59365f39bae789706a65f922eeb50fad942eca76af0c2c9599b1a72f235193019de6166d1de79a22c98260091d86c5d1f12a8e6d905c301d", 0x91}], 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) 13:26:07 executing program 1: prctl$PR_SET_MM(0x2, 0xf0ff1f00000000, &(0x7f0000ffc000/0x2000)=nil) 13:26:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140), 0x4) getsockname(r0, 0x0, &(0x7f0000000200)) 13:26:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 13:26:07 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000026c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000080)="376db9b57f52b0a35db21e1129b0027cb17e64c477b9248a754770bbc0b346074c784195eb963b51692b7382fd8545313c8cf0d3859d4129a11a6004293836651aedbb8a6804d98d7a8fabc4cb8a70c79aa3faf6f1360f199c61ddf01ab9ed12953ac3f6c7add74afe8242e96d4b972c5867e4e42026172f0f57d036bff6e42aeb56146bae1303948d9da61baabf", 0x8e}, {&(0x7f0000000140)="87dfa58ab4d83ef9f485b5ccb21d5b94347f8b", 0x13}, {&(0x7f0000000180)="d87bba65dcaed7b770f6bdc1f7663c0f43f0f038e7e91877e7a5bc5dc506cf", 0x1f}, {&(0x7f00000003c0)="0e3289b7c4d5c47fb60ad92e35edb2d29814ce632dd75b6804f1c2610349a8aff4a0ee062b55018037ea323003b8e5a953a4d432db0a0f1da00e07da0443af3915001c515d1c23e7ae85a634ecd1ad64c70f4e627c7976e3686acec61e60bfc72b29cf05c61da7d270b33fc7996a7d7fffd7fd1bcd0cf9a0f7a0e35a63764085bcebf30424eb00c22d0036e273998c842ea71740ef0a4c0e78ca846a5dbcf2279aed20f4f9181f6c91ba9a87981e92b87e4d6362eae881eaf847f3ccfcf756083dd4ade0d17be938e8ff7f447f4df31de725a10a6c023a07542f", 0xda}, {&(0x7f0000000280)="33b960044908a9c59e30f336235537e389b3b9af6b4842473d719b59026c0a6d106767d5a4994b35542e3c16110976365b88040a37e14131ce0d2de050f0d0d4b25cb358a2985ded4fd3e714cba1191988c61ed0c32596aefe", 0x59}, {&(0x7f00000004c0)="f704e3ddacd4efa713389c808631676315b81a473e", 0x15}, {&(0x7f0000000540)="b55bb888cfa5e8eae03d43a350a3a9aed5", 0x11}], 0x7}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 124.398800] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.401590] FAT-fs (loop0): unable to read boot sector 13:26:07 executing program 5: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000280)="0fa1ef837cdc69f9724030b98d007e16dd33fc3ff52b92e803e3ff13f6442ba769f6c9c8e7fb10094148206c2d6e9dd5b49f7693b54e1fa8411aa98cc9353518cdd9085c4a2e3f65079657c5a37a132664c29305f79f8ecbcd59365f39bae789706a65f922eeb50fad942eca76af0c2c9599b1a72f235193019de6166d1de79a22c98260091d86c5d1f12a8e6d905c301d", 0x91}], 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) [ 124.413128] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.417122] FAT-fs (loop0): unable to read boot sector 13:26:07 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x15}) 13:26:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) [ 124.478854] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 21 (only 16 groups) [ 124.529924] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.534652] FAT-fs (loop0): unable to read boot sector 13:26:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1fe}]}, 0x1c}}, 0x0) 13:26:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r0, 0x1, 0x9, &(0x7f0000000080), 0x8) 13:26:07 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x0, 0x1, 'G'}) 13:26:07 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000280)={0x4, 0x2}) 13:26:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 13:26:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 13:26:07 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x15}) [ 124.611374] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.613276] FAT-fs (loop0): unable to read boot sector [ 124.629366] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 21 (only 16 groups) 13:26:07 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0xc, &(0x7f0000000100)=[@timestamp={0x3}, @window, @mss, @sack_perm], 0x4) 13:26:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 13:26:07 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x0, 0x1, 'G'}) [ 124.742155] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.760205] FAT-fs (loop0): unable to read boot sector 13:26:07 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x0, 0x1, 'G'}) 13:26:07 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1c, 0x1}, 0x14}}, 0x0) 13:26:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000180)) 13:26:07 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x15}) 13:26:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 13:26:07 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000002c00)='net/snmp\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x0) 13:26:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1fe}]}, 0x1c}}, 0x0) 13:26:07 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000001d80)={0x4, 0x0, 0xf1e}, 0x0) 13:26:07 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1c, 0x1}, 0x14}}, 0x0) [ 124.929943] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 21 (only 16 groups) 13:26:07 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001280), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) 13:26:07 executing program 5: open$dir(&(0x7f0000000040)='./file1\x00', 0x40c0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file1'}, 0xb) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 13:26:07 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}]}}) 13:26:08 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000001d80)={0x4, 0x0, 0xf1e}, 0x0) 13:26:08 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x40000104) 13:26:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 13:26:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000002880)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000140)={[{@cruft}]}) 13:26:08 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1c, 0x1}, 0x14}}, 0x0) 13:26:08 executing program 4: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 13:26:08 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000001d80)={0x4, 0x0, 0xf1e}, 0x0) [ 125.156042] loop3: detected capacity change from 0 to 240 [ 125.168516] isofs_fill_super: root inode is not a directory. Corrupted media? [ 125.190217] loop3: detected capacity change from 0 to 240 13:26:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1fe}]}, 0x1c}}, 0x0) 13:26:08 executing program 4: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 13:26:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x43403d05, &(0x7f00000000c0)) [ 125.213255] isofs_fill_super: root inode is not a directory. Corrupted media? 13:26:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 13:26:08 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1c, 0x1}, 0x14}}, 0x0) 13:26:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1fe}]}, 0x1c}}, 0x0) 13:26:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f00007b8000/0x1000)=nil, &(0x7f0000000000)) 13:26:08 executing program 4: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 13:26:08 executing program 2: ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) 13:26:08 executing program 6: r0 = epoll_create1(0x0) epoll_pwait2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:26:08 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000001d80)={0x4, 0x0, 0xf1e}, 0x0) 13:26:08 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}]}}) 13:26:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000002880)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000140)={[{@cruft}]}) [ 125.413150] loop3: detected capacity change from 0 to 240 [ 125.431822] isofs_fill_super: root inode is not a directory. Corrupted media? 13:26:08 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)={0x0, "94ffed48ef7c277c0236503885d01d51956a08be31f43e85311d226984613ee6aa373f1150ad00649b2fa58dd167484fb2a04e24b5f6bd8e66d54d745a210ac6"}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r0, r0) 13:26:08 executing program 4: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 13:26:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:26:08 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000080)) 13:26:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000002880)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000140)={[{@cruft}]}) 13:26:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f00007b8000/0x1000)=nil, &(0x7f0000000000)) 13:26:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007600", @ANYRES32], 0x18}], 0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 13:26:08 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 13:26:08 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}]}}) 13:26:08 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 13:26:08 executing program 2: r0 = memfd_create(&(0x7f0000000340)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{y\xe0t\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xe4{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\xad\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc', 0x6) lseek(r0, 0x0, 0x2) 13:26:08 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x7, 0x0, 0x0, 0x0, 0x0) [ 125.679443] loop3: detected capacity change from 0 to 240 13:26:08 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) 13:26:08 executing program 2: r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) fsmount(r1, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 13:26:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000001340)='./file0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f00000017c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000100), 0x0, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:26:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f00007b8000/0x1000)=nil, &(0x7f0000000000)) 13:26:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x10, &(0x7f0000000240), 0x0, 0x0, 0x0) [ 125.713579] isofs_fill_super: root inode is not a directory. Corrupted media? [ 125.761478] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=39 comm=kworker/1:1 13:26:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:26:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000002880)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000140)={[{@cruft}]}) 13:26:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/prev\x00') preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/152, 0x98}], 0x1, 0x0, 0x0) 13:26:08 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) [ 125.805494] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=125 comm=kworker/1:2 13:26:08 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 13:26:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000001340)='./file0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f00000017c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000100), 0x0, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 125.857333] loop3: detected capacity change from 0 to 240 13:26:08 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}]}}) [ 125.870265] isofs_fill_super: root inode is not a directory. Corrupted media? [ 125.929701] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=125 comm=kworker/1:2 [ 126.704732] syz-executor.0 (4393) used greatest stack depth: 23408 bytes left 13:26:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f00007b8000/0x1000)=nil, &(0x7f0000000000)) 13:26:09 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) 13:26:09 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 13:26:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000001340)='./file0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f00000017c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000100), 0x0, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:26:09 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x80108906, 0x0) r1 = socket$inet(0x2, 0x0, 0x26) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:26:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0xca000, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 13:26:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b48, &(0x7f0000000000)) 13:26:09 executing program 7: prctl$PR_SET_MM_EXE_FILE(0x41555856, 0xd, 0xffffffffffffffff) 13:26:09 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) [ 126.807489] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=58 comm=kworker/0:2 13:26:09 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) 13:26:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x541b, 0x0) 13:26:09 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 13:26:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b48, &(0x7f0000000000)) 13:26:09 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x6a841, 0x0) write$snapshot(r0, &(0x7f0000000080)='A', 0x1) write$snapshot(r0, 0x0, 0x0) 13:26:09 executing program 7: prctl$PR_SET_MM_EXE_FILE(0x41555856, 0xd, 0xffffffffffffffff) 13:26:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000001340)='./file0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f00000017c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000100), 0x0, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:26:09 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), 0x0) 13:26:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df69b4d", 0xb}], 0x1) 13:26:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 127.046558] random: crng reseeded on system resumption [ 127.054218] random: crng reseeded on system resumption 13:26:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df69b4d", 0xb}], 0x1) 13:26:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:26:10 executing program 7: prctl$PR_SET_MM_EXE_FILE(0x41555856, 0xd, 0xffffffffffffffff) 13:26:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5455, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 127.096644] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=58 comm=kworker/0:2 13:26:10 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x5}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) 13:26:10 executing program 2: eventfd(0x0) r0 = fork() pidfd_open(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) wait4(0x0, &(0x7f0000000000), 0x1, &(0x7f0000000100)) 13:26:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b48, &(0x7f0000000000)) 13:26:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df69b4d", 0xb}], 0x1) 13:26:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x18, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0) 13:26:10 executing program 7: prctl$PR_SET_MM_EXE_FILE(0x41555856, 0xd, 0xffffffffffffffff) 13:26:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_BINDTODEVICE(r1, 0x29, 0x19, &(0x7f0000000000)='lo\x00', 0x10) 13:26:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b48, &(0x7f0000000000)) 13:26:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='\\\x00', &(0x7f00000000c0)='\x00', 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 13:26:10 executing program 6: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='\\\x00', &(0x7f00000000c0)='\x00', 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 13:26:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@loopback, r2}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:26:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df69b4d", 0xb}], 0x1) 13:26:10 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0xeff, &(0x7f0000000240)=0x0) io_destroy(r0) 13:26:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x4b, &(0x7f0000000000)="a94a128f", 0x4) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}, 0x0) 13:26:10 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80247008, &(0x7f0000000040)) 13:26:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='\\\x00', &(0x7f00000000c0)='\x00', 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 13:26:10 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 13:26:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 13:26:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) 13:26:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@loopback, r2}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:26:10 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0xeff, &(0x7f0000000240)=0x0) io_destroy(r0) 13:26:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@loopback, r2}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:26:10 executing program 6: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='\\\x00', &(0x7f00000000c0)='\x00', 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 13:26:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='\\\x00', &(0x7f00000000c0)='\x00', 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 13:26:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 13:26:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@loopback, r2}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:26:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@loopback, r2}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:26:10 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0xeff, &(0x7f0000000240)=0x0) io_destroy(r0) 13:26:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) 13:26:10 executing program 6: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='\\\x00', &(0x7f00000000c0)='\x00', 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 13:26:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 13:26:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@loopback, r2}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:26:10 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0xeff, &(0x7f0000000240)=0x0) io_destroy(r0) 13:26:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 13:26:10 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') pread64(r0, &(0x7f00000001c0)=""/195, 0xc3, 0x3ffffffffffffd) pread64(r0, &(0x7f0000000140)=""/18, 0x12, 0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x3}, 0x4080}, 0x0, 0xc, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010000ee870325132510000e87032510300000000002e2e20202020202020202010", 0x2c, 0x11400}], 0x0, &(0x7f0000010d00)=ANY=[]) futimesat(r1, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 13:26:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='\\\x00', &(0x7f00000000c0)='\x00', 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 13:26:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) 13:26:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@loopback, r2}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:26:10 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5312, 0x0) 13:26:10 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 127.837197] loop6: detected capacity change from 0 to 276 [ 127.855934] kmemleak: Found object by alias at 0x607f1a6399f0 [ 127.855951] CPU: 1 UID: 0 PID: 4545 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 127.855969] Tainted: [W]=WARN [ 127.855973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.855980] Call Trace: [ 127.855984] [ 127.855989] dump_stack_lvl+0xca/0x120 [ 127.856016] __lookup_object+0x94/0xb0 [ 127.856033] delete_object_full+0x27/0x70 [ 127.856050] free_percpu+0x30/0x1160 [ 127.856066] ? arch_uprobe_clear_state+0x16/0x140 [ 127.856087] futex_hash_free+0x38/0xc0 [ 127.856101] mmput+0x2d3/0x390 [ 127.856120] do_exit+0x79d/0x2970 [ 127.856134] ? signal_wake_up_state+0x85/0x120 [ 127.856150] ? zap_other_threads+0x2b9/0x3a0 [ 127.856165] ? __pfx_do_exit+0x10/0x10 [ 127.856178] ? do_group_exit+0x1c3/0x2a0 [ 127.856191] ? lock_release+0xc8/0x290 [ 127.856209] do_group_exit+0xd3/0x2a0 [ 127.856224] __x64_sys_exit_group+0x3e/0x50 [ 127.856238] x64_sys_call+0x18c5/0x18d0 [ 127.856254] do_syscall_64+0xbf/0x360 [ 127.856266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.856277] RIP: 0033:0x7f4ba2e36b19 [ 127.856286] Code: Unable to access opcode bytes at 0x7f4ba2e36aef. [ 127.856291] RSP: 002b:00007ffc21c6cfa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 127.856302] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f4ba2e36b19 [ 127.856310] RDX: 00007f4ba2de972b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 127.856317] RBP: 0000000000000000 R08: 0000001b2d022084 R09: 0000000000000000 [ 127.856324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.856331] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc21c6d090 [ 127.856346] [ 127.856350] kmemleak: Object (percpu) 0x607f1a6399ec (size 8): [ 127.856357] kmemleak: comm "syz-executor.2", pid 4554, jiffies 4294794668 [ 127.856364] kmemleak: min_count = 1 13:26:10 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 127.856368] kmemleak: count = 0 [ 127.856371] kmemleak: flags = 0x21 [ 127.856375] kmemleak: checksum = 0 [ 127.856379] kmemleak: backtrace: [ 127.856382] pcpu_alloc_noprof+0x87a/0x1170 [ 127.856398] alloc_vfsmnt+0x135/0x6e0 [ 127.856411] vfs_create_mount.part.0+0x40/0x440 [ 127.856426] path_mount+0x1637/0x1dd0 [ 127.856437] __x64_sys_mount+0x27b/0x300 [ 127.856448] do_syscall_64+0xbf/0x360 [ 127.856456] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:26:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) 13:26:10 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5312, 0x0) 13:26:11 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5312, 0x0) 13:26:11 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') pread64(r0, &(0x7f00000001c0)=""/195, 0xc3, 0x3ffffffffffffd) pread64(r0, &(0x7f0000000140)=""/18, 0x12, 0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x3}, 0x4080}, 0x0, 0xc, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010000ee870325132510000e87032510300000000002e2e20202020202020202010", 0x2c, 0x11400}], 0x0, &(0x7f0000010d00)=ANY=[]) futimesat(r1, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 13:26:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000140)=""/136) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:26:11 executing program 2: clock_gettime(0x0, &(0x7f0000000240)) 13:26:11 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xffffffff000, 0xffffffffffff0269}) 13:26:11 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 13:26:11 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 13:26:11 executing program 7: r0 = syz_io_uring_setup(0x2cb1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 13:26:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)) 13:26:11 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') pread64(r0, &(0x7f00000001c0)=""/195, 0xc3, 0x3ffffffffffffd) pread64(r0, &(0x7f0000000140)=""/18, 0x12, 0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x3}, 0x4080}, 0x0, 0xc, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010000ee870325132510000e87032510300000000002e2e20202020202020202010", 0x2c, 0x11400}], 0x0, &(0x7f0000010d00)=ANY=[]) futimesat(r1, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 13:26:11 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xffffffff000, 0xffffffffffff0269}) 13:26:11 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5312, 0x0) 13:26:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000140)=""/136) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:26:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 13:26:11 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 13:26:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000140)=""/136) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:26:11 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xffffffff000, 0xffffffffffff0269}) 13:26:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000140)=""/136) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:26:11 executing program 4: prctl$PR_SET_MM(0x2a, 0x0, &(0x7f0000ffa000/0x4000)=nil) 13:26:11 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') pread64(r0, &(0x7f00000001c0)=""/195, 0xc3, 0x3ffffffffffffd) pread64(r0, &(0x7f0000000140)=""/18, 0x12, 0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x3}, 0x4080}, 0x0, 0xc, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010000ee870325132510000e87032510300000000002e2e20202020202020202010", 0x2c, 0x11400}], 0x0, &(0x7f0000010d00)=ANY=[]) futimesat(r1, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 13:26:11 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 13:26:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f00000007c0)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000000fc0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000008000000ba"], 0x30}}], 0x2, 0x0) 13:26:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) 13:26:11 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 13:26:11 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xffffffff000, 0xffffffffffff0269}) 13:26:11 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 13:26:11 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 13:26:11 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x1762, 0x7fff}) 13:26:11 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@caif=@dbg, 0x80) 13:26:11 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@caif=@dbg, 0x80) 13:26:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f00000000c0)={0x58, r2, 0xad4e344af954d6f3, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}]}, 0x58}}, 0x0) 13:26:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) 13:26:11 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 13:26:11 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x1000, 0x0) [ 128.878724] audit: type=1400 audit(1756473971.871:10): avc: denied { ingress } for pid=252 comm="syz-fuzzer" saddr=127.0.0.1 src=44114 daddr=127.0.0.1 dest=43077 netif=lo scontext=system_u:object_r:bin_t:s0 tcontext=system_u:object_r:netif_t:s0 tclass=netif permissive=1 [ 128.882660] audit: type=1400 audit(1756473971.872:11): avc: denied { recvfrom } for pid=252 comm="syz-fuzzer" saddr=127.0.0.1 src=44114 daddr=127.0.0.1 dest=43077 netif=lo scontext=system_u:object_r:bin_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=node permissive=1 [ 128.890705] audit: type=1400 audit(1756473971.872:12): avc: denied { recv } for pid=252 comm="syz-fuzzer" saddr=127.0.0.1 src=44114 daddr=127.0.0.1 dest=43077 netif=lo scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=peer permissive=1 13:26:12 executing program 4: getresuid(&(0x7f0000001f80), &(0x7f0000001fc0), &(0x7f0000002000)) 13:26:12 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@caif=@dbg, 0x80) 13:26:12 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x8}, 0x0, &(0x7f0000000300), 0x0) 13:26:12 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f00000000c0)={0x58, r2, 0xad4e344af954d6f3, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}]}, 0x58}}, 0x0) 13:26:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, 0x0, 0x46) 13:26:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) 13:26:12 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) timerfd_create(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003f00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 129.064488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.071072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 13:26:12 executing program 0: r0 = epoll_create1(0x0) r1 = getpid() r2 = getpid() r3 = pidfd_open(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r5, &(0x7f0000000040)={r0, r3, 0x8001}) 13:26:12 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@caif=@dbg, 0x80) 13:26:12 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x5390, &(0x7f0000000400)={0x2}) [ 129.190951] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 129.581648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.582632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 13:26:12 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x8}, 0x0, &(0x7f0000000300), 0x0) 13:26:12 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f00000000c0)={0x58, r2, 0xad4e344af954d6f3, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}]}, 0x58}}, 0x0) 13:26:12 executing program 0: r0 = epoll_create1(0x0) r1 = getpid() r2 = getpid() r3 = pidfd_open(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r5, &(0x7f0000000040)={r0, r3, 0x8001}) 13:26:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) 13:26:12 executing program 5: r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 13:26:12 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:26:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') pread64(r0, &(0x7f0000000100)=""/147, 0x93, 0x0) 13:26:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b4a, 0xf0ff1f00000000) 13:26:12 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x8}, 0x0, &(0x7f0000000300), 0x0) 13:26:12 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x8}, 0x0, &(0x7f0000000300), 0x0) 13:26:12 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6}]}, 0x10) 13:26:12 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 13:26:12 executing program 0: r0 = epoll_create1(0x0) r1 = getpid() r2 = getpid() r3 = pidfd_open(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r5, &(0x7f0000000040)={r0, r3, 0x8001}) 13:26:12 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f00000000c0)={0x58, r2, 0xad4e344af954d6f3, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}]}, 0x58}}, 0x0) 13:26:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b4a, 0xf0ff1f00000000) 13:26:12 executing program 5: r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 13:26:12 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x8}, 0x0, &(0x7f0000000300), 0x0) 13:26:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b4a, 0xf0ff1f00000000) 13:26:12 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x8}, 0x0, &(0x7f0000000300), 0x0) 13:26:12 executing program 0: r0 = epoll_create1(0x0) r1 = getpid() r2 = getpid() r3 = pidfd_open(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r5, &(0x7f0000000040)={r0, r3, 0x8001}) 13:26:12 executing program 5: r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 13:26:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter6\x00') utimensat(r0, 0x0, 0x0, 0x0) 13:26:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/89) 13:26:12 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6}]}, 0x10) 13:26:12 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x8}, 0x0, &(0x7f0000000300), 0x0) 13:26:12 executing program 5: r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 13:26:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='#! \n'], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 13:26:12 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6}]}, 0x10) 13:26:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b4a, 0xf0ff1f00000000) 13:26:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter6\x00') utimensat(r0, 0x0, 0x0, 0x0) 13:26:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/89) [ 130.014920] process 'syz-executor.0' launched './file1' with NULL argv: empty string added 13:26:13 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 13:26:13 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x11, 0x0, 0x0) 13:26:13 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter6\x00') utimensat(r0, 0x0, 0x0, 0x0) 13:26:13 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f00000001c0)="f1", 0x1}, {&(0x7f00000002c0)="d8", 0x1}], 0x2, 0x0) 13:26:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='#! \n'], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 13:26:13 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6}]}, 0x10) 13:26:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/89) 13:26:13 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x96) 13:26:13 executing program 5: io_uring_setup(0x4bc0, &(0x7f0000000080)) 13:26:13 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f00000001c0)="f1", 0x1}, {&(0x7f00000002c0)="d8", 0x1}], 0x2, 0x0) 13:26:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='#! \n'], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 13:26:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001140)=ANY=[], 0x1) 13:26:13 executing program 5: syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @loopback, @remote, {[@cipso={0x86, 0x6d, 0x0, [{0x0, 0x12, "e7157342fd7760f5f47ddfbb14f8844b"}, {0x0, 0xa, "b45a3b917ca32e89"}, {0x0, 0x8, "ba09b52138a8"}, {0x0, 0xf, '\a\x00'/13}, {0x0, 0xd, "026ab676548583702ed4ff"}, {0x0, 0x6, "2f690234"}, {0x0, 0x6, "63646aa3"}, {0x0, 0x11, "2bf07e76cc3994ef82b4d61df58398"}, {0x0, 0xa, "e5815982affcf15b"}]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 13:26:13 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter6\x00') utimensat(r0, 0x0, 0x0, 0x0) 13:26:13 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x96) 13:26:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/89) 13:26:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000001c0), 0x0, 0x4) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 13:26:13 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f00000001c0)="f1", 0x1}, {&(0x7f00000002c0)="d8", 0x1}], 0x2, 0x0) 13:26:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5600, &(0x7f0000000000)) 13:26:13 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='2', 0x1}], 0x1, 0x0, 0x0, 0x96) 13:26:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x0) 13:26:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x13, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000028020000028400001b8000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e39333832373135313800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001f4ebd2e6bb144ba8e000d53fbc5896c010000000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000010400)="ff3f000000000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff VM DIAGNOSIS: 13:26:05 Registers: info registers vcpu 0 RAX=1ffff1100911ff01 RBX=dffffc0000000000 RCX=ffffffff819ce912 RDX=ffff888048c35280 RSI=ffffffff819cd64e RDI=ffff8880488ff808 RBP=1ffff1100911fefd RSP=ffff8880488ff7e8 R8 =0000000000000000 R9 =fffff940002255f6 R10=0000000000000001 R11=0000000000000001 R12=000000000000008b R13=ffff88800cd5f640 R14=00007f66dca32000 R15=8000000044abf007 RIP=ffffffff819cd664 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb58faf8990 CR3=000000003c985000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888048c273c0 R8 =0000000000000000 R9 =ffffed10013eb046 R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8520398718 CR3=000000003f433000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000