Warning: Permanently added '[localhost]:60932' (ECDSA) to the list of known hosts. 2023/08/25 13:00:45 fuzzer started 2023/08/25 13:00:46 dialing manager at localhost:42391 syzkaller login: [ 98.082380] cgroup: Unknown subsys name 'net' [ 98.295921] cgroup: Unknown subsys name 'rlimit' [ 109.543369] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/25 13:00:58 syscalls: 2217 2023/08/25 13:00:58 code coverage: enabled 2023/08/25 13:00:58 comparison tracing: enabled 2023/08/25 13:00:58 extra coverage: enabled 2023/08/25 13:00:58 setuid sandbox: enabled 2023/08/25 13:00:58 namespace sandbox: enabled 2023/08/25 13:00:58 Android sandbox: enabled 2023/08/25 13:00:58 fault injection: enabled 2023/08/25 13:00:58 leak checking: enabled 2023/08/25 13:00:58 net packet injection: enabled 2023/08/25 13:00:58 net device setup: enabled 2023/08/25 13:00:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/25 13:00:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/25 13:00:58 USB emulation: enabled 2023/08/25 13:00:58 hci packet injection: enabled 2023/08/25 13:00:58 wifi device emulation: enabled 2023/08/25 13:00:58 802.15.4 emulation: enabled 2023/08/25 13:00:58 fetching corpus: 0, signal 0/2000 (executing program) 2023/08/25 13:00:58 fetching corpus: 37, signal 21257/24855 (executing program) 2023/08/25 13:00:58 fetching corpus: 87, signal 34152/39188 (executing program) 2023/08/25 13:00:58 fetching corpus: 137, signal 42736/49126 (executing program) 2023/08/25 13:00:58 fetching corpus: 187, signal 48690/56316 (executing program) 2023/08/25 13:00:58 fetching corpus: 237, signal 53107/62003 (executing program) 2023/08/25 13:00:58 fetching corpus: 287, signal 58215/68251 (executing program) 2023/08/25 13:00:58 fetching corpus: 337, signal 62546/73680 (executing program) 2023/08/25 13:00:59 fetching corpus: 387, signal 66108/78329 (executing program) 2023/08/25 13:00:59 fetching corpus: 437, signal 69985/83177 (executing program) 2023/08/25 13:00:59 fetching corpus: 487, signal 72339/86614 (executing program) 2023/08/25 13:00:59 fetching corpus: 537, signal 76444/91570 (executing program) 2023/08/25 13:00:59 fetching corpus: 587, signal 78165/94300 (executing program) 2023/08/25 13:00:59 fetching corpus: 637, signal 82027/98915 (executing program) 2023/08/25 13:00:59 fetching corpus: 687, signal 83795/101627 (executing program) 2023/08/25 13:00:59 fetching corpus: 737, signal 85738/104478 (executing program) 2023/08/25 13:00:59 fetching corpus: 787, signal 87751/107325 (executing program) 2023/08/25 13:00:59 fetching corpus: 837, signal 88940/109435 (executing program) 2023/08/25 13:01:00 fetching corpus: 886, signal 91382/112601 (executing program) 2023/08/25 13:01:00 fetching corpus: 936, signal 94903/116552 (executing program) 2023/08/25 13:01:00 fetching corpus: 986, signal 96249/118680 (executing program) 2023/08/25 13:01:00 fetching corpus: 1036, signal 98267/121321 (executing program) 2023/08/25 13:01:00 fetching corpus: 1084, signal 100471/124144 (executing program) 2023/08/25 13:01:00 fetching corpus: 1133, signal 102385/126640 (executing program) 2023/08/25 13:01:00 fetching corpus: 1183, signal 104262/129119 (executing program) 2023/08/25 13:01:00 fetching corpus: 1230, signal 106888/132107 (executing program) 2023/08/25 13:01:01 fetching corpus: 1280, signal 108211/134065 (executing program) 2023/08/25 13:01:01 fetching corpus: 1330, signal 109422/135887 (executing program) 2023/08/25 13:01:01 fetching corpus: 1380, signal 110719/137788 (executing program) 2023/08/25 13:01:01 fetching corpus: 1430, signal 111878/139567 (executing program) 2023/08/25 13:01:01 fetching corpus: 1480, signal 113216/141442 (executing program) 2023/08/25 13:01:01 fetching corpus: 1530, signal 114193/143042 (executing program) 2023/08/25 13:01:01 fetching corpus: 1579, signal 115766/144980 (executing program) 2023/08/25 13:01:01 fetching corpus: 1628, signal 117331/146910 (executing program) 2023/08/25 13:01:01 fetching corpus: 1678, signal 119253/149056 (executing program) 2023/08/25 13:01:02 fetching corpus: 1728, signal 121147/151157 (executing program) 2023/08/25 13:01:02 fetching corpus: 1778, signal 122846/153086 (executing program) 2023/08/25 13:01:02 fetching corpus: 1828, signal 124226/154764 (executing program) 2023/08/25 13:01:02 fetching corpus: 1878, signal 125130/156115 (executing program) 2023/08/25 13:01:02 fetching corpus: 1927, signal 126032/157484 (executing program) 2023/08/25 13:01:02 fetching corpus: 1977, signal 126911/158849 (executing program) 2023/08/25 13:01:02 fetching corpus: 2027, signal 127906/160223 (executing program) 2023/08/25 13:01:02 fetching corpus: 2077, signal 128988/161623 (executing program) 2023/08/25 13:01:02 fetching corpus: 2127, signal 130225/163077 (executing program) 2023/08/25 13:01:02 fetching corpus: 2177, signal 130717/164103 (executing program) 2023/08/25 13:01:03 fetching corpus: 2227, signal 131677/165376 (executing program) 2023/08/25 13:01:03 fetching corpus: 2277, signal 132591/166610 (executing program) 2023/08/25 13:01:03 fetching corpus: 2326, signal 133655/167968 (executing program) 2023/08/25 13:01:03 fetching corpus: 2376, signal 134405/169048 (executing program) 2023/08/25 13:01:03 fetching corpus: 2426, signal 135143/170101 (executing program) 2023/08/25 13:01:03 fetching corpus: 2476, signal 135943/171232 (executing program) 2023/08/25 13:01:03 fetching corpus: 2526, signal 136616/172272 (executing program) 2023/08/25 13:01:03 fetching corpus: 2576, signal 138143/173753 (executing program) 2023/08/25 13:01:03 fetching corpus: 2626, signal 139062/174916 (executing program) 2023/08/25 13:01:03 fetching corpus: 2675, signal 139847/175941 (executing program) 2023/08/25 13:01:04 fetching corpus: 2725, signal 140547/176936 (executing program) 2023/08/25 13:01:04 fetching corpus: 2775, signal 141564/178051 (executing program) 2023/08/25 13:01:04 fetching corpus: 2824, signal 142578/179156 (executing program) 2023/08/25 13:01:04 fetching corpus: 2874, signal 143471/180203 (executing program) 2023/08/25 13:01:04 fetching corpus: 2924, signal 144335/181192 (executing program) 2023/08/25 13:01:04 fetching corpus: 2974, signal 145400/182199 (executing program) 2023/08/25 13:01:04 fetching corpus: 3024, signal 146225/183112 (executing program) 2023/08/25 13:01:04 fetching corpus: 3074, signal 147127/184055 (executing program) 2023/08/25 13:01:04 fetching corpus: 3124, signal 148020/184975 (executing program) 2023/08/25 13:01:05 fetching corpus: 3174, signal 148647/185788 (executing program) 2023/08/25 13:01:05 fetching corpus: 3224, signal 149227/186560 (executing program) 2023/08/25 13:01:05 fetching corpus: 3274, signal 149748/187360 (executing program) 2023/08/25 13:01:05 fetching corpus: 3324, signal 150652/188285 (executing program) 2023/08/25 13:01:05 fetching corpus: 3374, signal 151227/189027 (executing program) 2023/08/25 13:01:05 fetching corpus: 3424, signal 151827/189790 (executing program) 2023/08/25 13:01:05 fetching corpus: 3473, signal 152396/190553 (executing program) 2023/08/25 13:01:05 fetching corpus: 3523, signal 153300/191397 (executing program) 2023/08/25 13:01:05 fetching corpus: 3573, signal 153783/192066 (executing program) 2023/08/25 13:01:05 fetching corpus: 3623, signal 154290/192732 (executing program) 2023/08/25 13:01:05 fetching corpus: 3673, signal 154835/193409 (executing program) 2023/08/25 13:01:06 fetching corpus: 3723, signal 155395/194114 (executing program) 2023/08/25 13:01:06 fetching corpus: 3772, signal 156193/194807 (executing program) 2023/08/25 13:01:06 fetching corpus: 3820, signal 156766/195437 (executing program) 2023/08/25 13:01:06 fetching corpus: 3870, signal 157293/196035 (executing program) 2023/08/25 13:01:06 fetching corpus: 3919, signal 157802/196613 (executing program) 2023/08/25 13:01:06 fetching corpus: 3969, signal 158326/197222 (executing program) 2023/08/25 13:01:06 fetching corpus: 4019, signal 159184/197874 (executing program) 2023/08/25 13:01:06 fetching corpus: 4069, signal 159733/198446 (executing program) 2023/08/25 13:01:06 fetching corpus: 4119, signal 160303/199023 (executing program) 2023/08/25 13:01:07 fetching corpus: 4169, signal 160980/199616 (executing program) 2023/08/25 13:01:07 fetching corpus: 4219, signal 161343/200148 (executing program) 2023/08/25 13:01:07 fetching corpus: 4268, signal 162190/200750 (executing program) 2023/08/25 13:01:07 fetching corpus: 4318, signal 162603/201286 (executing program) 2023/08/25 13:01:07 fetching corpus: 4368, signal 163081/201792 (executing program) 2023/08/25 13:01:07 fetching corpus: 4417, signal 164151/202317 (executing program) 2023/08/25 13:01:07 fetching corpus: 4467, signal 164751/202814 (executing program) 2023/08/25 13:01:07 fetching corpus: 4517, signal 165087/203251 (executing program) 2023/08/25 13:01:07 fetching corpus: 4567, signal 165703/203736 (executing program) 2023/08/25 13:01:07 fetching corpus: 4616, signal 166151/204203 (executing program) 2023/08/25 13:01:08 fetching corpus: 4665, signal 166889/204711 (executing program) 2023/08/25 13:01:08 fetching corpus: 4715, signal 167459/205150 (executing program) 2023/08/25 13:01:08 fetching corpus: 4765, signal 167911/205554 (executing program) 2023/08/25 13:01:08 fetching corpus: 4815, signal 168703/205987 (executing program) 2023/08/25 13:01:08 fetching corpus: 4864, signal 169106/206380 (executing program) 2023/08/25 13:01:08 fetching corpus: 4913, signal 170025/206799 (executing program) 2023/08/25 13:01:08 fetching corpus: 4963, signal 170469/207195 (executing program) 2023/08/25 13:01:08 fetching corpus: 5013, signal 170795/207570 (executing program) 2023/08/25 13:01:08 fetching corpus: 5063, signal 171144/207931 (executing program) 2023/08/25 13:01:09 fetching corpus: 5113, signal 171511/208333 (executing program) 2023/08/25 13:01:09 fetching corpus: 5163, signal 172014/208400 (executing program) 2023/08/25 13:01:09 fetching corpus: 5213, signal 172806/208400 (executing program) 2023/08/25 13:01:09 fetching corpus: 5262, signal 173211/208400 (executing program) 2023/08/25 13:01:09 fetching corpus: 5312, signal 173771/208400 (executing program) 2023/08/25 13:01:09 fetching corpus: 5362, signal 174161/208400 (executing program) 2023/08/25 13:01:09 fetching corpus: 5412, signal 174898/208400 (executing program) 2023/08/25 13:01:09 fetching corpus: 5462, signal 175372/208400 (executing program) 2023/08/25 13:01:09 fetching corpus: 5512, signal 175704/208400 (executing program) 2023/08/25 13:01:10 fetching corpus: 5562, signal 176140/208400 (executing program) 2023/08/25 13:01:10 fetching corpus: 5612, signal 176777/208400 (executing program) 2023/08/25 13:01:10 fetching corpus: 5661, signal 177247/208400 (executing program) 2023/08/25 13:01:10 fetching corpus: 5710, signal 177654/208402 (executing program) 2023/08/25 13:01:10 fetching corpus: 5760, signal 178077/208402 (executing program) 2023/08/25 13:01:10 fetching corpus: 5810, signal 178566/208402 (executing program) 2023/08/25 13:01:10 fetching corpus: 5860, signal 179101/208423 (executing program) 2023/08/25 13:01:10 fetching corpus: 5909, signal 179477/208423 (executing program) 2023/08/25 13:01:10 fetching corpus: 5958, signal 179703/208423 (executing program) 2023/08/25 13:01:11 fetching corpus: 6008, signal 180043/208423 (executing program) 2023/08/25 13:01:11 fetching corpus: 6057, signal 180416/208423 (executing program) 2023/08/25 13:01:11 fetching corpus: 6107, signal 180704/208423 (executing program) 2023/08/25 13:01:11 fetching corpus: 6157, signal 181132/208423 (executing program) 2023/08/25 13:01:11 fetching corpus: 6207, signal 181681/208423 (executing program) 2023/08/25 13:01:11 fetching corpus: 6257, signal 182009/208423 (executing program) 2023/08/25 13:01:11 fetching corpus: 6307, signal 182345/208423 (executing program) 2023/08/25 13:01:11 fetching corpus: 6357, signal 182643/208423 (executing program) 2023/08/25 13:01:11 fetching corpus: 6407, signal 183014/208423 (executing program) 2023/08/25 13:01:12 fetching corpus: 6457, signal 183642/208423 (executing program) 2023/08/25 13:01:12 fetching corpus: 6507, signal 184228/208423 (executing program) 2023/08/25 13:01:12 fetching corpus: 6556, signal 184427/208423 (executing program) 2023/08/25 13:01:12 fetching corpus: 6605, signal 185082/208423 (executing program) 2023/08/25 13:01:12 fetching corpus: 6655, signal 185617/208423 (executing program) 2023/08/25 13:01:12 fetching corpus: 6705, signal 185863/208423 (executing program) 2023/08/25 13:01:12 fetching corpus: 6755, signal 186311/208423 (executing program) 2023/08/25 13:01:12 fetching corpus: 6805, signal 186681/208423 (executing program) 2023/08/25 13:01:12 fetching corpus: 6855, signal 187141/208423 (executing program) 2023/08/25 13:01:12 fetching corpus: 6904, signal 189516/210317 (executing program) 2023/08/25 13:01:12 fetching corpus: 6954, signal 189893/210317 (executing program) 2023/08/25 13:01:13 fetching corpus: 7002, signal 190239/210399 (executing program) 2023/08/25 13:01:13 fetching corpus: 7052, signal 190480/210399 (executing program) 2023/08/25 13:01:13 fetching corpus: 7102, signal 190853/210399 (executing program) 2023/08/25 13:01:13 fetching corpus: 7152, signal 191794/210399 (executing program) 2023/08/25 13:01:13 fetching corpus: 7202, signal 192135/210553 (executing program) 2023/08/25 13:01:13 fetching corpus: 7251, signal 192599/210564 (executing program) 2023/08/25 13:01:13 fetching corpus: 7300, signal 193040/210564 (executing program) 2023/08/25 13:01:13 fetching corpus: 7349, signal 193285/210564 (executing program) 2023/08/25 13:01:13 fetching corpus: 7398, signal 193518/210564 (executing program) 2023/08/25 13:01:13 fetching corpus: 7448, signal 193781/210564 (executing program) 2023/08/25 13:01:14 fetching corpus: 7498, signal 194091/210564 (executing program) 2023/08/25 13:01:14 fetching corpus: 7548, signal 194363/210564 (executing program) 2023/08/25 13:01:14 fetching corpus: 7598, signal 194661/210564 (executing program) 2023/08/25 13:01:14 fetching corpus: 7648, signal 194967/210565 (executing program) 2023/08/25 13:01:14 fetching corpus: 7698, signal 195722/210565 (executing program) 2023/08/25 13:01:14 fetching corpus: 7748, signal 196117/210565 (executing program) 2023/08/25 13:01:14 fetching corpus: 7798, signal 196617/210565 (executing program) 2023/08/25 13:01:14 fetching corpus: 7848, signal 196865/210565 (executing program) 2023/08/25 13:01:14 fetching corpus: 7898, signal 197134/210565 (executing program) 2023/08/25 13:01:14 fetching corpus: 7948, signal 197523/210565 (executing program) 2023/08/25 13:01:14 fetching corpus: 7998, signal 198065/210565 (executing program) 2023/08/25 13:01:15 fetching corpus: 8047, signal 198298/210603 (executing program) 2023/08/25 13:01:15 fetching corpus: 8095, signal 198599/210603 (executing program) 2023/08/25 13:01:15 fetching corpus: 8145, signal 198948/210603 (executing program) 2023/08/25 13:01:15 fetching corpus: 8194, signal 199338/210603 (executing program) 2023/08/25 13:01:15 fetching corpus: 8243, signal 199579/210603 (executing program) 2023/08/25 13:01:15 fetching corpus: 8293, signal 199960/210603 (executing program) 2023/08/25 13:01:15 fetching corpus: 8342, signal 200316/210603 (executing program) 2023/08/25 13:01:15 fetching corpus: 8390, signal 200718/210603 (executing program) 2023/08/25 13:01:15 fetching corpus: 8440, signal 201052/210603 (executing program) 2023/08/25 13:01:16 fetching corpus: 8490, signal 201319/210603 (executing program) 2023/08/25 13:01:16 fetching corpus: 8540, signal 201556/210603 (executing program) 2023/08/25 13:01:16 fetching corpus: 8590, signal 202018/210603 (executing program) 2023/08/25 13:01:16 fetching corpus: 8639, signal 202314/210603 (executing program) 2023/08/25 13:01:16 fetching corpus: 8689, signal 202509/210603 (executing program) 2023/08/25 13:01:16 fetching corpus: 8739, signal 202782/210603 (executing program) 2023/08/25 13:01:16 fetching corpus: 8789, signal 203039/210603 (executing program) 2023/08/25 13:01:16 fetching corpus: 8839, signal 203287/210603 (executing program) 2023/08/25 13:01:16 fetching corpus: 8889, signal 203473/210603 (executing program) 2023/08/25 13:01:16 fetching corpus: 8939, signal 203741/210603 (executing program) 2023/08/25 13:01:17 fetching corpus: 8989, signal 203991/210603 (executing program) 2023/08/25 13:01:17 fetching corpus: 9039, signal 204368/210603 (executing program) 2023/08/25 13:01:17 fetching corpus: 9089, signal 204752/210603 (executing program) 2023/08/25 13:01:17 fetching corpus: 9139, signal 205299/210603 (executing program) 2023/08/25 13:01:17 fetching corpus: 9189, signal 205524/210603 (executing program) 2023/08/25 13:01:17 fetching corpus: 9239, signal 205754/210603 (executing program) 2023/08/25 13:01:17 fetching corpus: 9289, signal 206040/210603 (executing program) 2023/08/25 13:01:17 fetching corpus: 9339, signal 206336/210603 (executing program) 2023/08/25 13:01:17 fetching corpus: 9388, signal 206539/210603 (executing program) 2023/08/25 13:01:17 fetching corpus: 9438, signal 206782/210603 (executing program) 2023/08/25 13:01:18 fetching corpus: 9488, signal 207082/210603 (executing program) 2023/08/25 13:01:18 fetching corpus: 9538, signal 207305/210603 (executing program) 2023/08/25 13:01:18 fetching corpus: 9587, signal 207539/210603 (executing program) 2023/08/25 13:01:18 fetching corpus: 9637, signal 207847/210603 (executing program) 2023/08/25 13:01:18 fetching corpus: 9687, signal 208243/210603 (executing program) 2023/08/25 13:01:18 fetching corpus: 9697, signal 208320/210603 (executing program) 2023/08/25 13:01:18 fetching corpus: 9697, signal 208320/210603 (executing program) 2023/08/25 13:01:21 starting 8 fuzzer processes 13:01:21 executing program 0: r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000480)="e8fe863d5de31d44", 0x8}, {&(0x7f0000000140)="9c", 0x1}], 0x2) 13:01:21 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xfa0}) 13:01:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/164, 0xa4}, {&(0x7f0000000380)=""/97, 0x61}, {&(0x7f0000000400)=""/82, 0x52}, {0x0}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000700)=""/231, 0xe7}], 0xa, &(0x7f0000000800)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x1, 0x40002040, 0x0) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x0) dup2(r0, r1) 13:01:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x2e, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}]}, 0x24}], 0x1}, 0x0) [ 132.990679] audit: type=1400 audit(1692968481.419:6): avc: denied { execmem } for pid=267 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:01:21 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x57) 13:01:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 13:01:21 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 13:01:21 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000004240)=""/4106, 0x100a, 0x0) [ 134.507271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.509357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.512380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.514052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.515870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.517008] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.523991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.524028] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.529035] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 134.530983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.534292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.539807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.596527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.623925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.631082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.644226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.645540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.649153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.650885] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 134.655006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.658890] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.681656] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.685767] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.696622] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 134.721047] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.723540] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.724226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.729171] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.754130] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 134.757763] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.581716] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 136.583206] Bluetooth: hci0: command 0x0409 tx timeout [ 136.646739] Bluetooth: hci1: command 0x0409 tx timeout [ 136.647003] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 136.709694] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 136.773693] Bluetooth: hci4: command 0x0409 tx timeout [ 136.902529] Bluetooth: hci5: command 0x0409 tx timeout [ 136.902633] Bluetooth: hci6: command 0x0409 tx timeout [ 138.631126] Bluetooth: hci0: command 0x041b tx timeout [ 138.694616] Bluetooth: hci1: command 0x041b tx timeout [ 138.821648] Bluetooth: hci4: command 0x041b tx timeout [ 138.949648] Bluetooth: hci5: command 0x041b tx timeout [ 138.949759] Bluetooth: hci6: command 0x041b tx timeout [ 140.678977] Bluetooth: hci0: command 0x040f tx timeout [ 140.744624] Bluetooth: hci1: command 0x040f tx timeout [ 140.870635] Bluetooth: hci4: command 0x040f tx timeout [ 140.997647] Bluetooth: hci6: command 0x040f tx timeout [ 140.998859] Bluetooth: hci5: command 0x040f tx timeout [ 142.725772] Bluetooth: hci0: command 0x0419 tx timeout [ 142.789638] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 142.790527] Bluetooth: hci1: command 0x0419 tx timeout [ 142.918710] Bluetooth: hci4: command 0x0419 tx timeout [ 143.045625] Bluetooth: hci5: command 0x0419 tx timeout [ 143.045640] Bluetooth: hci6: command 0x0419 tx timeout [ 143.111712] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 143.173843] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 148.230815] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 148.614735] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 148.806619] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 151.042110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.045086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.046516] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.061952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.075463] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.083445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.714710] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.715907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.721549] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.723967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.727812] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.729039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.158892] Bluetooth: hci2: command 0x0409 tx timeout [ 153.798667] Bluetooth: hci3: command 0x0409 tx timeout [ 153.926637] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 155.206897] Bluetooth: hci2: command 0x041b tx timeout [ 155.846823] Bluetooth: hci3: command 0x041b tx timeout [ 157.254740] Bluetooth: hci2: command 0x040f tx timeout [ 157.895147] Bluetooth: hci3: command 0x040f tx timeout [ 159.174648] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 159.303101] Bluetooth: hci2: command 0x0419 tx timeout [ 159.943597] Bluetooth: hci3: command 0x0419 tx timeout [ 162.364097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 162.366082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 162.368639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 162.390390] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 162.409187] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 162.433363] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 164.549675] Bluetooth: hci7: command 0x0409 tx timeout [ 166.599792] Bluetooth: hci7: command 0x041b tx timeout [ 168.645840] Bluetooth: hci7: command 0x040f tx timeout [ 170.694611] Bluetooth: hci7: command 0x0419 tx timeout [ 196.628348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.629490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.630950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.640304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.646829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 196.657989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.726651] Bluetooth: hci0: command 0x0409 tx timeout [ 199.365712] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 199.366787] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 199.429617] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 199.429714] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 200.775810] Bluetooth: hci0: command 0x041b tx timeout [ 202.397639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.405357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.409990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.414211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.416298] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 202.417714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.821953] Bluetooth: hci0: command 0x040f tx timeout [ 202.981398] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.986799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.001181] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.025001] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.041405] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 203.043117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.084051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.087841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.088967] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.094106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.096534] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 203.097944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.176480] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 203.179351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 203.182122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 203.270742] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 203.281539] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 203.287890] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 204.487234] Bluetooth: hci1: command 0x0409 tx timeout [ 204.869928] Bluetooth: hci0: command 0x0419 tx timeout [ 205.189659] Bluetooth: hci4: command 0x0409 tx timeout [ 205.190214] Bluetooth: hci5: command 0x0409 tx timeout [ 205.381846] Bluetooth: hci6: command 0x0409 tx timeout [ 206.535834] Bluetooth: hci1: command 0x041b tx timeout [ 206.974875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.975495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.238755] Bluetooth: hci4: command 0x041b tx timeout [ 207.239158] Bluetooth: hci5: command 0x041b tx timeout [ 207.250797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.251259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.430931] Bluetooth: hci6: command 0x041b tx timeout [ 208.581812] Bluetooth: hci1: command 0x040f tx timeout [ 208.699014] audit: type=1400 audit(1692968557.126:7): avc: denied { open } for pid=3880 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 208.708767] audit: type=1400 audit(1692968557.127:8): avc: denied { kernel } for pid=3880 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:02:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) 13:02:37 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) [ 209.285837] Bluetooth: hci5: command 0x040f tx timeout [ 209.286228] Bluetooth: hci4: command 0x040f tx timeout [ 209.440056] syz-executor.2[3920]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 209.481593] Bluetooth: hci6: command 0x040f tx timeout [ 209.563165] syz-executor.2[3928]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 13:02:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) [ 209.894989] syz-executor.2[3945]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 13:02:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) [ 210.229898] syz-executor.2[3962]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 13:02:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) [ 210.535631] syz-executor.2[3976]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 210.630773] Bluetooth: hci1: command 0x0419 tx timeout [ 211.334620] Bluetooth: hci4: command 0x0419 tx timeout [ 211.335036] Bluetooth: hci5: command 0x0419 tx timeout [ 211.525622] Bluetooth: hci6: command 0x0419 tx timeout 13:02:40 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) [ 211.734953] syz-executor.2[4028]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 13:02:40 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) [ 212.036061] syz-executor.2[4046]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 13:02:40 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) [ 212.261128] syz-executor.2[4059]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 216.581634] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 219.804293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.805632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.901045] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.902856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.913285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.936080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.938279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.941167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.019517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.020834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.174082] syz-executor.1 (1426) used greatest stack depth: 24136 bytes left [ 222.022707] Bluetooth: hci3: command 0x0409 tx timeout [ 224.070796] Bluetooth: hci3: command 0x041b tx timeout [ 225.926628] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 226.117795] Bluetooth: hci3: command 0x040f tx timeout [ 228.165657] Bluetooth: hci3: command 0x0419 tx timeout [ 229.811042] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.819022] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.830034] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.841253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.844980] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 229.847197] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 232.005848] Bluetooth: hci7: command 0x0409 tx timeout [ 234.054617] Bluetooth: hci7: command 0x041b tx timeout [ 236.101898] Bluetooth: hci7: command 0x040f tx timeout [ 238.150619] Bluetooth: hci7: command 0x0419 tx timeout [ 261.126664] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 264.285999] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.287548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.290020] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.294152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.296298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 264.297614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.684029] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.687435] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.688437] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.704385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.707218] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 264.708790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.374774] Bluetooth: hci0: command 0x0409 tx timeout [ 266.375073] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 266.693622] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 266.758182] Bluetooth: hci5: command 0x0409 tx timeout [ 266.822843] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 268.421624] Bluetooth: hci0: command 0x041b tx timeout [ 268.805688] Bluetooth: hci5: command 0x041b tx timeout [ 268.957059] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.964800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.971505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.990999] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.999324] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.000245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.536093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.544811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.546159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.554008] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.556967] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.569870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.822105] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.832008] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.833338] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.857791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.864497] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 269.865396] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.470978] Bluetooth: hci0: command 0x040f tx timeout [ 270.853743] Bluetooth: hci5: command 0x040f tx timeout [ 271.047783] Bluetooth: hci1: command 0x0409 tx timeout [ 271.622357] Bluetooth: hci4: command 0x0409 tx timeout [ 271.941740] Bluetooth: hci6: command 0x0409 tx timeout [ 272.517828] Bluetooth: hci0: command 0x0419 tx timeout [ 272.902047] Bluetooth: hci5: command 0x0419 tx timeout [ 273.093766] Bluetooth: hci1: command 0x041b tx timeout [ 273.669623] Bluetooth: hci4: command 0x041b tx timeout [ 273.925623] Bluetooth: hci2: command 0x0406 tx timeout [ 273.989615] Bluetooth: hci6: command 0x041b tx timeout [ 275.141628] Bluetooth: hci1: command 0x040f tx timeout [ 275.619453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.619989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.719793] Bluetooth: hci4: command 0x040f tx timeout [ 275.940162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.941804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.037792] Bluetooth: hci6: command 0x040f tx timeout [ 277.189627] Bluetooth: hci1: command 0x0419 tx timeout [ 277.766854] Bluetooth: hci4: command 0x0419 tx timeout [ 278.086774] Bluetooth: hci6: command 0x0419 tx timeout [ 285.005473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.006503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.339062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.340653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.895633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.896525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.255640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.256156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.626205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.626992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.933203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.934026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.034646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.035274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.162727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.163330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.896697] hrtimer: interrupt took 28293 ns [ 330.197268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.202358] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.204191] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.211854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.215178] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 330.220349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.922466] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.926469] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.928948] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.934086] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 330.940098] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 330.942040] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.293750] Bluetooth: hci1: command 0x0409 tx timeout [ 332.997779] Bluetooth: hci6: command 0x0409 tx timeout [ 334.342235] Bluetooth: hci1: command 0x041b tx timeout [ 335.046206] Bluetooth: hci6: command 0x041b tx timeout [ 336.390489] Bluetooth: hci1: command 0x040f tx timeout [ 337.094150] Bluetooth: hci6: command 0x040f tx timeout [ 338.438608] Bluetooth: hci1: command 0x0419 tx timeout [ 339.141644] Bluetooth: hci6: command 0x0419 tx timeout [ 343.559729] Bluetooth: hci3: command 0x0406 tx timeout [ 352.362684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.363807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.502236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.503002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.098635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.099185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.142260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.142924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:05:02 executing program 0: r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000480)="e8fe863d5de31d44", 0x8}, {&(0x7f0000000140)="9c", 0x1}], 0x2) 13:05:02 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 13:05:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xfa0}) 13:05:02 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000004240)=""/4106, 0x100a, 0x0) 13:05:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xfa0}) 13:05:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 13:05:02 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 13:05:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 13:05:02 executing program 0: r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000480)="e8fe863d5de31d44", 0x8}, {&(0x7f0000000140)="9c", 0x1}], 0x2) [ 353.747771] syz-executor.4[9951]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 353.855189] syz-executor.2[9960]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 13:05:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 13:05:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xfa0}) 13:05:02 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000004240)=""/4106, 0x100a, 0x0) 13:05:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 13:05:02 executing program 0: r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000480)="e8fe863d5de31d44", 0x8}, {&(0x7f0000000140)="9c", 0x1}], 0x2) 13:05:02 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 13:05:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xfa0}) [ 354.043675] syz-executor.4[9970]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 13:05:02 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 13:05:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 13:05:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 13:05:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 13:05:02 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 13:05:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xfa0}) 13:05:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xfa0}) 13:05:02 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000004240)=""/4106, 0x100a, 0x0) [ 354.517262] syz-executor.2[9985]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 354.722948] syz-executor.4[9995]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 355.845734] Bluetooth: hci7: command 0x0406 tx timeout 13:05:04 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000a80)={@local, @local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @remote}, @dest_unreach={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}}}, 0x0) 13:05:04 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x40, &(0x7f0000000240)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000c40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 13:05:04 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000a80)={@local, @local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @remote}, @dest_unreach={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}}}, 0x0) 13:05:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 13:05:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000001c0)={0x0, 0x20}) 13:05:05 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000a80)={@local, @local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @remote}, @dest_unreach={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}}}, 0x0) 13:05:05 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000a80)={@local, @local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @remote}, @dest_unreach={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}}}, 0x0) 13:05:05 executing program 3: memfd_secret(0x8764316e4a9b0a19) 13:05:06 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ea4ed069463c4c48730820509ffb391e623fe1f3f2dc732787", 0x19) r1 = epoll_create(0x7) ptrace$peeksig(0x10, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff8}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 13:05:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 13:05:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 13:05:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000001c0)={0x0, 0x20}) 13:05:06 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x40, &(0x7f0000000240)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000c40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 13:05:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xfff, 0x4) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="6ec48cbd2f21fb27f86ce26ca4e1c6d148e3a824bf0c06a13aa16a8b601ada12d3ad3bf060ed64f120a7ba3ce4addff229754f0869c34fcc7a1893f5aa141b983f71b1bfec858ca6c385f6cd2e6c74f5ca2f3e40c4117a619c", 0x59}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x006\x00\x00\x00,\v'], 0x78}}], 0x1, 0x0) 13:05:06 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x40, &(0x7f0000000240)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000c40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 13:05:06 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x40, &(0x7f0000000240)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000c40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 13:05:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000001c0)={0x0, 0x20}) 13:05:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 358.399145] syz-executor.2[10037]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 13:05:06 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x40, &(0x7f0000000240)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000c40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 13:05:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xfff, 0x4) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="6ec48cbd2f21fb27f86ce26ca4e1c6d148e3a824bf0c06a13aa16a8b601ada12d3ad3bf060ed64f120a7ba3ce4addff229754f0869c34fcc7a1893f5aa141b983f71b1bfec858ca6c385f6cd2e6c74f5ca2f3e40c4117a619c", 0x59}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x006\x00\x00\x00,\v'], 0x78}}], 0x1, 0x0) 13:05:06 executing program 5: r0 = io_uring_setup(0x395f, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xe, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESDEC], 0x20) 13:05:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000001c0)={0x0, 0x20}) 13:05:06 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x40, &(0x7f0000000240)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000c40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 13:05:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 13:05:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x38}}, 0x0) 13:05:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 13:05:07 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x40, &(0x7f0000000240)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000c40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 13:05:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 13:05:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xfff, 0x4) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="6ec48cbd2f21fb27f86ce26ca4e1c6d148e3a824bf0c06a13aa16a8b601ada12d3ad3bf060ed64f120a7ba3ce4addff229754f0869c34fcc7a1893f5aa141b983f71b1bfec858ca6c385f6cd2e6c74f5ca2f3e40c4117a619c", 0x59}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x006\x00\x00\x00,\v'], 0x78}}], 0x1, 0x0) 13:05:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) 13:05:07 executing program 7: ioperm(0x0, 0x7ff, 0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:05:07 executing program 2: perf_event_open(&(0x7f0000003c80)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x8, 0x0, 0x0) 13:05:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xfff, 0x4) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="6ec48cbd2f21fb27f86ce26ca4e1c6d148e3a824bf0c06a13aa16a8b601ada12d3ad3bf060ed64f120a7ba3ce4addff229754f0869c34fcc7a1893f5aa141b983f71b1bfec858ca6c385f6cd2e6c74f5ca2f3e40c4117a619c", 0x59}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x006\x00\x00\x00,\v'], 0x78}}], 0x1, 0x0) 13:05:07 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') pread64(r0, &(0x7f0000000000)=""/55, 0x37, 0x0) 13:05:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x5c3b00, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x8000, 0x8}}, './file1\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) pread64(r5, &(0x7f00000002c0)=""/210, 0xd2, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000001800c8e07c52f3456c9fe9c5ea577b4d0000716d41c732fa87782bbfb9f446131122566f63f26aea813d938437e73d4b95c6b046efe2ad820df77d89049334fefbe0006e7ff903cd9c725f0b1e75d0392e6c74c4df5a9b4149e6cdab8d30263b60bbe662a8", @ANYRES32=r5, @ANYBLOB="40000000000000ef2d2f66696c653000"]) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fE\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="06cba7ad6c56825b9de0213e5cdf0bccfbf4b5679e8384accafe97bad92a1feb2b3ab5652c8248ed514afd67d230fa823950a121523f73eb13e20052196df5086bc5da98425992c3a6e252815ec572a8b74cef720c"]) 13:05:07 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') pread64(r0, &(0x7f0000000000)=""/55, 0x37, 0x0) 13:05:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x41009432, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) setresgid(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getgid() setgroups(0x3, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0x0]) 13:05:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1d, 0x0, 0x189, &(0x7f0000000100)}) 13:05:07 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002740)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 359.598463] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 359.672094] Bluetooth: Unexpected start frame (len 10) 13:05:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) faccessat2(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 13:05:07 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9", @ANYRESHEX], 0xf) 13:05:08 executing program 3: io_setup(0x4, &(0x7f0000000280)=0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$binfmt_elf64(r2, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 360.005822] 9pnet: Could not find request transport: fE [ 360.704464] 9pnet: Could not find request transport: fE 13:05:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x41009432, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) setresgid(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getgid() setgroups(0x3, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0x0]) 13:05:09 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) faccessat2(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 13:05:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002740)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 13:05:09 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') pread64(r0, &(0x7f0000000000)=""/55, 0x37, 0x0) 13:05:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r0, &(0x7f0000000580)=""/226, 0xe2, 0x100) 13:05:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3ed2, &(0x7f0000000080)) r1 = io_uring_setup(0x3ed2, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000440)=[r1], 0x1) 13:05:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x5c3b00, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x8000, 0x8}}, './file1\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) pread64(r5, &(0x7f00000002c0)=""/210, 0xd2, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000001800c8e07c52f3456c9fe9c5ea577b4d0000716d41c732fa87782bbfb9f446131122566f63f26aea813d938437e73d4b95c6b046efe2ad820df77d89049334fefbe0006e7ff903cd9c725f0b1e75d0392e6c74c4df5a9b4149e6cdab8d30263b60bbe662a8", @ANYRES32=r5, @ANYBLOB="40000000000000ef2d2f66696c653000"]) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fE\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="06cba7ad6c56825b9de0213e5cdf0bccfbf4b5679e8384accafe97bad92a1feb2b3ab5652c8248ed514afd67d230fa823950a121523f73eb13e20052196df5086bc5da98425992c3a6e252815ec572a8b74cef720c"]) 13:05:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x41009432, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) setresgid(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getgid() setgroups(0x3, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0x0]) 13:05:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002740)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 13:05:09 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') pread64(r0, &(0x7f0000000000)=""/55, 0x37, 0x0) 13:05:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x41009432, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) setresgid(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getgid() setgroups(0x3, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0x0]) 13:05:09 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) faccessat2(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 13:05:09 executing program 3: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 13:05:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x41009432, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) setresgid(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getgid() setgroups(0x3, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0x0]) 13:05:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3ed2, &(0x7f0000000080)) r1 = io_uring_setup(0x3ed2, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000440)=[r1], 0x1) 13:05:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002740)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 13:05:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200), 0x24, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:05:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x41009432, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) setresgid(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getgid() setgroups(0x3, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0x0]) 13:05:09 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) faccessat2(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 13:05:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x41009432, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) setresgid(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getgid() setgroups(0x3, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0x0]) 13:05:09 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) shutdown(r0, 0x0) [ 362.818781] 9pnet: Could not find request transport: fE 13:05:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3ed2, &(0x7f0000000080)) r1 = io_uring_setup(0x3ed2, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000440)=[r1], 0x1) 13:05:11 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps\x00') pread64(r0, &(0x7f0000000000)=""/55, 0x37, 0x0) 13:05:11 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$CDROMPLAYBLK(r0, 0x5317, 0x0) 13:05:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000100)=0xc) 13:05:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200), 0x24, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:05:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200), 0x24, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:05:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x5c3b00, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x8000, 0x8}}, './file1\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) pread64(r5, &(0x7f00000002c0)=""/210, 0xd2, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000001800c8e07c52f3456c9fe9c5ea577b4d0000716d41c732fa87782bbfb9f446131122566f63f26aea813d938437e73d4b95c6b046efe2ad820df77d89049334fefbe0006e7ff903cd9c725f0b1e75d0392e6c74c4df5a9b4149e6cdab8d30263b60bbe662a8", @ANYRES32=r5, @ANYBLOB="40000000000000ef2d2f66696c653000"]) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fE\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="06cba7ad6c56825b9de0213e5cdf0bccfbf4b5679e8384accafe97bad92a1feb2b3ab5652c8248ed514afd67d230fa823950a121523f73eb13e20052196df5086bc5da98425992c3a6e252815ec572a8b74cef720c"]) 13:05:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) [ 364.999235] 9pnet: Could not find request transport: fE 13:05:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000100)=0xc) 13:05:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000100)=0xc) 13:05:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 13:05:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000100)=0xc) 13:05:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 13:05:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3ed2, &(0x7f0000000080)) r1 = io_uring_setup(0x3ed2, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000440)=[r1], 0x1) 13:05:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200), 0x24, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:05:14 executing program 1: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000001c0)=""/30) 13:05:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x5c3b00, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x8000, 0x8}}, './file1\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) pread64(r5, &(0x7f00000002c0)=""/210, 0xd2, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000001800c8e07c52f3456c9fe9c5ea577b4d0000716d41c732fa87782bbfb9f446131122566f63f26aea813d938437e73d4b95c6b046efe2ad820df77d89049334fefbe0006e7ff903cd9c725f0b1e75d0392e6c74c4df5a9b4149e6cdab8d30263b60bbe662a8", @ANYRES32=r5, @ANYBLOB="40000000000000ef2d2f66696c653000"]) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fE\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="06cba7ad6c56825b9de0213e5cdf0bccfbf4b5679e8384accafe97bad92a1feb2b3ab5652c8248ed514afd67d230fa823950a121523f73eb13e20052196df5086bc5da98425992c3a6e252815ec572a8b74cef720c"]) 13:05:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:chfn_exec_t:s0\x00', 0x21, 0x0) 13:05:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200), 0x24, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) [ 365.948357] audit: type=1400 audit(1692968714.376:9): avc: denied { associate } for pid=10184 comm="syz-executor.7" name="hpet" dev="devtmpfs" ino=99 scontext=system_u:object_r:chfn_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 13:05:14 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000300)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002000)={0x100000, 0x0, 0x0, {r0}}, 0x20) 13:05:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 13:05:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 13:05:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:chfn_exec_t:s0\x00', 0x21, 0x0) 13:05:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 13:05:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:chfn_exec_t:s0\x00', 0x21, 0x0) 13:05:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 13:05:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:chfn_exec_t:s0\x00', 0x21, 0x0) 13:05:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:chfn_exec_t:s0\x00', 0x21, 0x0) [ 366.615588] 9pnet: Could not find request transport: fE 13:05:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:chfn_exec_t:s0\x00', 0x21, 0x0) 13:05:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 13:05:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200), 0x24, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:05:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 13:05:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000100)={r1}, 0x10) 13:05:18 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x19, 0x0, 0x0, "500c13239484"}}) 13:05:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200), 0x24, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:05:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:chfn_exec_t:s0\x00', 0x21, 0x0) 13:05:19 executing program 5: io_setup(0x373, &(0x7f00000001c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 13:05:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x3, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:05:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 13:05:19 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) r3 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0x408c5333, &(0x7f0000000280)) 13:05:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}}, 0x0) 13:05:19 executing program 5: io_setup(0x373, &(0x7f00000001c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 13:05:19 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, &(0x7f0000000140)) 13:05:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 13:05:19 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) sendto(r0, 0x0, 0x2, 0x0, &(0x7f0000001d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="df451f725493"}, 0x80) 13:05:19 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2292}}, './file0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macsec0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, 0x1, [@local]}) 13:05:19 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) close(r0) 13:05:20 executing program 5: io_setup(0x373, &(0x7f00000001c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 13:05:20 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, &(0x7f0000000140)) 13:05:20 executing program 4: rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='w', 0x1, 0x0) 13:05:20 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) close(r0) 13:05:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 13:05:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@mss, @window={0x3, 0x101}], 0x366) 13:05:20 executing program 3: unshare(0x28000200) unshare(0x20020000) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8ad823, 0x0) 13:05:20 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000980)={0x4, 0x0, 0x8, 0x6, 0x0, &(0x7f0000000580)="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"}) 13:05:20 executing program 4: ioperm(0x0, 0x6d1f, 0x8) wait4(0x0, 0x0, 0x0, 0x0) 13:05:20 executing program 3: unshare(0x28000200) unshare(0x20020000) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8ad823, 0x0) 13:05:20 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x40189206, 0x0) 13:05:20 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, &(0x7f0000000140)) 13:05:20 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) close(r0) 13:05:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@mss, @window={0x3, 0x101}], 0x366) 13:05:20 executing program 5: io_setup(0x373, &(0x7f00000001c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 13:05:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@mss, @window={0x3, 0x101}], 0x366) 13:05:20 executing program 2: io_setup(0xa, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 13:05:20 executing program 4: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x60, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}]}, 0x60}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000180001fb64a044803ea5d7d00aae"], 0x28}}, 0x0) 13:05:20 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) close(r0) [ 372.295823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 372.320907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 13:05:20 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x40189206, 0x0) 13:05:20 executing program 3: unshare(0x28000200) unshare(0x20020000) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8ad823, 0x0) 13:05:20 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0) 13:05:20 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x2ca812d2efb49edf) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 13:05:20 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, &(0x7f0000000140)) 13:05:20 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) 13:05:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@mss, @window={0x3, 0x101}], 0x366) 13:05:20 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') link(&(0x7f0000001200)='./file1\x00', &(0x7f0000001240)='./file0\x00') [ 372.586885] 9pnet_virtio: no channels available for device syz [ 372.611336] 9pnet_virtio: no channels available for device syz 13:05:21 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x40189206, 0x0) 13:05:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr\x00') getdents(r0, &(0x7f0000000000)=""/77, 0x1b) getdents64(r0, &(0x7f0000000140)=""/124, 0x7c) 13:05:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x7, &(0x7f0000000040)=0x2, 0x4) 13:05:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x30000009}) dup2(r0, r1) 13:05:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x22, &(0x7f00000001c0)) lseek(r0, 0x0, 0x0) [ 372.863289] audit: type=1400 audit(1692968721.291:10): avc: denied { block_suspend } for pid=10336 comm="syz-executor.1" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 13:05:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x1, 0x0, 0x20, 0x0, 0x8000, 0x2000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0xfff, 0x0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x5444, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@posixacl}], [{@subj_type={'subj_type', 0x3d, '/dev/loop-control\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq}]}}) 13:05:21 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x40189206, 0x0) 13:05:21 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') link(&(0x7f0000001200)='./file1\x00', &(0x7f0000001240)='./file0\x00') 13:05:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x30000009}) dup2(r0, r1) 13:05:21 executing program 0: prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) 13:05:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) 13:05:21 executing program 3: unshare(0x28000200) unshare(0x20020000) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8ad823, 0x0) 13:05:21 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000400)) 13:05:21 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') link(&(0x7f0000001200)='./file1\x00', &(0x7f0000001240)='./file0\x00') 13:05:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x30000009}) dup2(r0, r1) 13:05:21 executing program 5: ioperm(0x0, 0x7ff, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, 0x0, 0x0) 13:05:21 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x2) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2, 0x39a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5c}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6f5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x2bd, 0x0, 0x0, 0x0, 0x0) 13:05:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@dev}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 13:05:21 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') link(&(0x7f0000001200)='./file1\x00', &(0x7f0000001240)='./file0\x00') 13:05:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x30000009}) dup2(r0, r1) [ 373.296764] ======================================================= [ 373.296764] WARNING: The mand mount option has been deprecated and [ 373.296764] and is ignored by this kernel. Remove the mand [ 373.296764] option from the mount to silence this warning. [ 373.296764] ======================================================= 13:05:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x30000009}) dup2(r0, r1) 13:05:21 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000000)) 13:05:21 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x2) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2, 0x39a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5c}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6f5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x2bd, 0x0, 0x0, 0x0, 0x0) 13:05:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x2) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2, 0x39a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5c}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6f5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x2bd, 0x0, 0x0, 0x0, 0x0) 13:05:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@dev}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 13:05:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x30000009}) dup2(r0, r1) 13:05:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x1, 0x0, 0x20, 0x0, 0x8000, 0x2000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0xfff, 0x0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x5444, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@posixacl}], [{@subj_type={'subj_type', 0x3d, '/dev/loop-control\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq}]}}) 13:05:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x1, 0x0, 0x20, 0x0, 0x8000, 0x2000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0xfff, 0x0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x5444, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@posixacl}], [{@subj_type={'subj_type', 0x3d, '/dev/loop-control\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq}]}}) 13:05:22 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x2) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2, 0x39a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5c}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6f5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x2bd, 0x0, 0x0, 0x0, 0x0) 13:05:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@dev}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 13:05:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x30000009}) dup2(r0, r1) 13:05:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x96, 0x3, 0x0, 0x0, 0x0, 0x10410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x677, 0x0, @perf_config_ext={0x4, 0x4}, 0xc8, 0xfff, 0x4c1d, 0x0, 0x0, 0x3, 0x0, 0x0, 0xaf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x26e1, 0x0) syncfs(r0) openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) clone3(0x0, 0x0) 13:05:23 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x2) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2, 0x39a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5c}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6f5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x2bd, 0x0, 0x0, 0x0, 0x0) 13:05:24 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x2) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2, 0x39a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5c}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6f5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x2bd, 0x0, 0x0, 0x0, 0x0) [ 378.483866] syz-executor.4 (10386) used greatest stack depth: 24024 bytes left 13:05:27 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x2) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2, 0x39a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5c}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6f5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x2bd, 0x0, 0x0, 0x0, 0x0) 13:05:27 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x2) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2, 0x39a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5c}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6f5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x2bd, 0x0, 0x0, 0x0, 0x0) 13:05:29 executing program 7: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 13:05:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 13:05:29 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) write(r1, &(0x7f0000000040)="4676e2b7f1dd1563ef22e549585e7029136644f4a18425c93af6dc1b093af14067fa43d7", 0x24) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f0000000100)=""/61, 0x3d}], 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x0) shutdown(r3, 0x1) shutdown(r1, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x450800, 0x48) [ 388.678718] Bluetooth: hci0: command 0x0406 tx timeout [ 388.679644] Bluetooth: hci5: command 0x0406 tx timeout [ 392.711003] Bluetooth: hci4: command 0x0406 tx timeout [ 400.701833] watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.5:10394] [ 400.703099] Modules linked in: [ 400.703650] irq event stamp: 4973411 [ 400.704273] hardirqs last enabled at (4973410): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.709038] hardirqs last disabled at (4973411): [] sysvec_apic_timer_interrupt+0xf/0x90 [ 400.710212] softirqs last enabled at (4958880): [] irq_exit_rcu+0x93/0xc0 [ 400.711000] softirqs last disabled at (4958883): [] irq_exit_rcu+0x93/0xc0 [ 400.711783] CPU: 0 PID: 10394 Comm: syz-executor.5 Not tainted 6.5.0-rc7-next-20230825 #1 [ 400.712553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 400.713303] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70 [ 400.713820] Code: 00 e8 a0 ff ff ff 31 c0 e9 99 8f 0f 03 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <65> 8b 05 bd fc b5 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 400.715476] RSP: 0018:ffff88806ce096e8 EFLAGS: 00000246 [ 400.715973] RAX: 0000000000000000 RBX: ffffffff813c0de0 RCX: 0000000000000100 [ 400.716629] RDX: ffff888041250000 RSI: ffffffff810c601c RDI: ffffffff813c0de0 [ 400.717300] RBP: ffff88806ce09790 R08: ffff88804082a100 R09: 0000000000000000 [ 400.717966] R10: ffffed1008105420 R11: 0000000000000000 R12: 0000000000000000 [ 400.718624] R13: ffff88806ce097c0 R14: ffff888041250000 R15: ffff88806ce09790 [ 400.719295] FS: 00007ff444dc4700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 400.720036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.720589] CR2: 00007f9cfbb0c018 CR3: 000000000b564000 CR4: 0000000000350ef0 [ 400.721240] Call Trace: [ 400.721491] [ 400.721706] ? show_regs+0x96/0xa0 [ 400.722064] ? watchdog_timer_fn+0x375/0x460 [ 400.722515] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 400.722981] ? __hrtimer_run_queues+0x17f/0xb60 [ 400.723448] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 400.723930] ? ktime_get_update_offsets_now+0x25a/0x360 [ 400.724445] ? hrtimer_interrupt+0x2ef/0x750 [ 400.724887] ? __sysvec_apic_timer_interrupt+0xb3/0x330 [ 400.725400] ? sysvec_apic_timer_interrupt+0x33/0x90 [ 400.725890] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.726420] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 400.726939] ? arch_stack_walk+0x14c/0x160 [ 400.727351] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 400.727870] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 400.728339] arch_stack_walk+0x7a/0x160 [ 400.728730] ? lock_acquire+0x19a/0x4c0 [ 400.729118] ? __hrtimer_run_queues+0x1ee/0xb60 [ 400.729586] stack_trace_save+0x90/0xd0 [ 400.729974] ? __pfx_stack_trace_save+0x10/0x10 [ 400.730431] ? __pfx_lock_release+0x10/0x10 [ 400.730860] kasan_save_stack+0x22/0x50 [ 400.731252] ? read_tsc+0x9/0x20 [ 400.731599] ? ktime_get+0x157/0x1f0 [ 400.731976] ? __pfx_lapic_next_deadline+0x10/0x10 [ 400.732451] ? clockevents_program_event+0x135/0x360 [ 400.732955] ? tick_program_event+0xac/0x140 [ 400.733384] ? hrtimer_interrupt+0x586/0x750 [ 400.733824] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 400.734423] ? lockdep_hardirqs_on_prepare+0x12d/0x3f0 [ 400.734933] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.735456] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.735991] kasan_set_track+0x25/0x30 [ 400.736360] __kasan_slab_alloc+0x59/0x70 [ 400.736758] kmem_cache_alloc_node+0x199/0x3b0 [ 400.737218] kmalloc_reserve+0x169/0x270 [ 400.737606] __alloc_skb+0x129/0x330 [ 400.737969] ? lockdep_hardirqs_on_prepare+0x12d/0x3f0 [ 400.738490] ? __pfx___alloc_skb+0x10/0x10 [ 400.738896] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.739431] __netdev_alloc_skb+0x72/0x370 [ 400.739843] __ieee80211_beacon_get+0x3f6/0xfc0 [ 400.740302] ? __pfx___lock_acquire+0x10/0x10 [ 400.740753] ieee80211_beacon_get_tim+0xa1/0x550 [ 400.741224] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 400.741741] ? print_usage_bug.part.0+0x3a0/0x5e0 [ 400.742222] ? ieee80211_iterate_active_interfaces_atomic+0x4/0x1c0 [ 400.742835] ? lock_is_held_type+0x9f/0x120 [ 400.743264] mac80211_hwsim_beacon_tx+0x402/0x730 [ 400.743746] __iterate_interfaces+0x2d3/0x580 [ 400.744179] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 400.744697] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 400.745214] ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 [ 400.745814] mac80211_hwsim_beacon+0x105/0x200 [ 400.746260] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 400.746747] __hrtimer_run_queues+0x59d/0xb60 [ 400.747196] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 400.747672] ? ktime_get_update_offsets_now+0x25a/0x360 [ 400.748187] hrtimer_run_softirq+0x14c/0x310 [ 400.748627] __do_softirq+0x1b7/0x7d4 [ 400.749018] irq_exit_rcu+0x93/0xc0 [ 400.749384] sysvec_apic_timer_interrupt+0x6e/0x90 [ 400.749866] [ 400.750103] [ 400.750328] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.750828] RIP: 0010:__fsnotify_inode_delete+0x4/0x20 [ 400.751338] Code: 0b e8 ff e9 72 f6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <53> 48 89 fb e8 03 17 b2 ff 48 8d bb 68 04 00 00 5b e9 d6 99 00 00 [ 400.752974] RSP: 0018:ffff88800b3cfd00 EFLAGS: 00000212 [ 400.753473] RAX: 000000000001238b RBX: ffff888040414b80 RCX: ffffc90009616000 [ 400.754152] RDX: 0000000000040000 RSI: ffffffff81907a6f RDI: ffff888040414b80 [ 400.754823] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 400.755492] R10: ffffffff85d52bd7 R11: 0000000000000001 R12: ffff888040414d38 [ 400.756155] R13: ffff888040414d28 R14: ffff888040414c08 R15: ffff888040414c58 [ 400.756833] ? __destroy_inode+0x1ff/0x750 [ 400.757258] __destroy_inode+0x207/0x750 [ 400.757660] destroy_inode+0x91/0x1b0 [ 400.758033] iput.part.0+0x4d2/0x6f0 [ 400.758429] iput+0x5c/0x80 [ 400.758731] dentry_unlink_inode+0x2b4/0x460 [ 400.759176] __dentry_kill+0x36f/0x5c0 [ 400.759561] ? dput+0x39/0xe60 [ 400.759888] dput+0x880/0xe60 [ 400.760223] __fput+0x53d/0xa70 [ 400.760579] __fput_sync+0x45/0x50 [ 400.760944] __x64_sys_close+0x8c/0x120 [ 400.761333] do_syscall_64+0x3f/0x90 [ 400.761699] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 400.762209] RIP: 0033:0x7ff44780172b [ 400.762562] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 400.764200] RSP: 002b:00007ff444dc30e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 400.764915] RAX: ffffffffffffffda RBX: 00007ff447961f60 RCX: 00007ff44780172b [ 400.765577] RDX: 0000000000001000 RSI: 00007ff444dc3160 RDI: 0000000000000005 [ 400.766250] RBP: 000000000000001d R08: 0000000000000000 R09: 0000000000000000 [ 400.766908] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 400.767574] R13: 00007fffd84b878f R14: 00007ff444dc4300 R15: 0000000000022000 [ 400.768256] [ 400.768487] Sending NMI from CPU 0 to CPUs 1: [ 400.768926] NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30 [ 400.770051] hpet: Lost 3 RTC interrupts 13:05:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 13:05:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x1, 0x0, 0x20, 0x0, 0x8000, 0x2000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0xfff, 0x0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x5444, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@posixacl}], [{@subj_type={'subj_type', 0x3d, '/dev/loop-control\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq}]}}) 13:05:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@dev}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 13:05:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x2) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2, 0x39a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5c}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6f5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x2bd, 0x0, 0x0, 0x0, 0x0) 13:05:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="00030000001b00fbe3d94c", 0xb}], 0x1}}], 0x1, 0x0) 13:05:57 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) write(r1, &(0x7f0000000040)="4676e2b7f1dd1563ef22e549585e7029136644f4a18425c93af6dc1b093af14067fa43d7", 0x24) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f0000000100)=""/61, 0x3d}], 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x0) shutdown(r3, 0x1) shutdown(r1, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x450800, 0x48) 13:05:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x96, 0x3, 0x0, 0x0, 0x0, 0x10410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x677, 0x0, @perf_config_ext={0x4, 0x4}, 0xc8, 0xfff, 0x4c1d, 0x0, 0x0, 0x3, 0x0, 0x0, 0xaf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x26e1, 0x0) syncfs(r0) openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) clone3(0x0, 0x0) 13:05:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x1, 0x0, 0x20, 0x0, 0x8000, 0x2000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0xfff, 0x0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x5444, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@posixacl}], [{@subj_type={'subj_type', 0x3d, '/dev/loop-control\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq}]}}) 13:05:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x2) pipe(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2, 0x39a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x5c}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6f5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x2bd, 0x0, 0x0, 0x0, 0x0) VM DIAGNOSIS: 13:05:49 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8255fde5 RDI=ffffffff87f02b60 RBP=ffffffff87f02b20 RSP=ffff88806ce08fe0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff87f02b20 R14=0000000000000010 R15=ffffffff8255fdd0 RIP=ffffffff8255fe3d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff444dc4700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9cfbb0c018 CR3=000000000b564000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff00ffff00ff00000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000c9f83 RBX=0000000000000001 RCX=ffffffff845a933e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81299b05 RBP=dffffc0000000000 RSP=ffff888008de7e70 R8 =0000000000000001 R9 =ffffed100d9e6a08 R10=ffff88806cf35043 R11=0000000000000001 R12=ffffffff85d52bd0 R13=1ffff110011bcfd3 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff845aa2de RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4e0c169b58 CR3=000000000dc5e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000410e11c000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000