Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:46709' (ECDSA) to the list of known hosts. 2025/09/01 11:20:11 fuzzer started 2025/09/01 11:20:11 dialing manager at localhost:35473 syzkaller login: [ 51.132038] cgroup: Unknown subsys name 'net' [ 51.202317] cgroup: Unknown subsys name 'cpuset' [ 51.220041] cgroup: Unknown subsys name 'rlimit' 2025/09/01 11:20:22 syscalls: 2214 2025/09/01 11:20:22 code coverage: enabled 2025/09/01 11:20:22 comparison tracing: enabled 2025/09/01 11:20:22 extra coverage: enabled 2025/09/01 11:20:22 setuid sandbox: enabled 2025/09/01 11:20:22 namespace sandbox: enabled 2025/09/01 11:20:22 Android sandbox: enabled 2025/09/01 11:20:22 fault injection: enabled 2025/09/01 11:20:22 leak checking: enabled 2025/09/01 11:20:22 net packet injection: enabled 2025/09/01 11:20:22 net device setup: enabled 2025/09/01 11:20:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 11:20:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 11:20:22 USB emulation: enabled 2025/09/01 11:20:22 hci packet injection: enabled 2025/09/01 11:20:22 wifi device emulation: enabled 2025/09/01 11:20:22 802.15.4 emulation: enabled 2025/09/01 11:20:22 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 11:20:22 fetching corpus: 46, signal 14415/18097 (executing program) 2025/09/01 11:20:22 fetching corpus: 96, signal 25132/30318 (executing program) 2025/09/01 11:20:22 fetching corpus: 146, signal 34106/40637 (executing program) 2025/09/01 11:20:22 fetching corpus: 196, signal 40017/47898 (executing program) 2025/09/01 11:20:22 fetching corpus: 246, signal 46331/55371 (executing program) 2025/09/01 11:20:22 fetching corpus: 296, signal 51499/61655 (executing program) 2025/09/01 11:20:22 fetching corpus: 346, signal 55466/66795 (executing program) 2025/09/01 11:20:22 fetching corpus: 396, signal 57545/70083 (executing program) 2025/09/01 11:20:22 fetching corpus: 446, signal 62721/76098 (executing program) 2025/09/01 11:20:23 fetching corpus: 496, signal 68487/82517 (executing program) 2025/09/01 11:20:23 fetching corpus: 546, signal 72803/87570 (executing program) 2025/09/01 11:20:23 fetching corpus: 596, signal 76654/92122 (executing program) 2025/09/01 11:20:23 fetching corpus: 646, signal 79576/95831 (executing program) 2025/09/01 11:20:23 fetching corpus: 696, signal 81966/99022 (executing program) 2025/09/01 11:20:23 fetching corpus: 746, signal 84104/101960 (executing program) 2025/09/01 11:20:23 fetching corpus: 796, signal 86518/105061 (executing program) 2025/09/01 11:20:23 fetching corpus: 846, signal 87927/107306 (executing program) 2025/09/01 11:20:23 fetching corpus: 896, signal 91986/111542 (executing program) 2025/09/01 11:20:23 fetching corpus: 946, signal 93650/113907 (executing program) 2025/09/01 11:20:23 fetching corpus: 996, signal 95106/116063 (executing program) 2025/09/01 11:20:24 fetching corpus: 1046, signal 97298/118773 (executing program) 2025/09/01 11:20:24 fetching corpus: 1096, signal 98512/120668 (executing program) 2025/09/01 11:20:24 fetching corpus: 1146, signal 100764/123334 (executing program) 2025/09/01 11:20:24 fetching corpus: 1196, signal 102294/125395 (executing program) 2025/09/01 11:20:24 fetching corpus: 1246, signal 103580/127300 (executing program) 2025/09/01 11:20:24 fetching corpus: 1296, signal 105242/129421 (executing program) 2025/09/01 11:20:24 fetching corpus: 1346, signal 106644/131296 (executing program) 2025/09/01 11:20:24 fetching corpus: 1396, signal 108067/133191 (executing program) 2025/09/01 11:20:24 fetching corpus: 1446, signal 108885/134592 (executing program) 2025/09/01 11:20:24 fetching corpus: 1496, signal 110433/136427 (executing program) 2025/09/01 11:20:25 fetching corpus: 1546, signal 112050/138305 (executing program) 2025/09/01 11:20:25 fetching corpus: 1596, signal 112976/139713 (executing program) 2025/09/01 11:20:25 fetching corpus: 1646, signal 113970/141175 (executing program) 2025/09/01 11:20:25 fetching corpus: 1696, signal 114932/142612 (executing program) 2025/09/01 11:20:25 fetching corpus: 1746, signal 115502/143747 (executing program) 2025/09/01 11:20:25 fetching corpus: 1796, signal 116419/145118 (executing program) 2025/09/01 11:20:25 fetching corpus: 1846, signal 117866/146738 (executing program) 2025/09/01 11:20:25 fetching corpus: 1896, signal 119060/148180 (executing program) 2025/09/01 11:20:25 fetching corpus: 1946, signal 119796/149313 (executing program) 2025/09/01 11:20:25 fetching corpus: 1996, signal 120888/150687 (executing program) 2025/09/01 11:20:25 fetching corpus: 2046, signal 121677/151864 (executing program) 2025/09/01 11:20:26 fetching corpus: 2096, signal 122852/153223 (executing program) 2025/09/01 11:20:26 fetching corpus: 2146, signal 123705/154375 (executing program) 2025/09/01 11:20:26 fetching corpus: 2196, signal 124420/155476 (executing program) 2025/09/01 11:20:26 fetching corpus: 2246, signal 125190/156599 (executing program) 2025/09/01 11:20:26 fetching corpus: 2296, signal 126008/157682 (executing program) 2025/09/01 11:20:26 fetching corpus: 2346, signal 126628/158653 (executing program) 2025/09/01 11:20:26 fetching corpus: 2396, signal 127793/159878 (executing program) 2025/09/01 11:20:26 fetching corpus: 2446, signal 128661/160924 (executing program) 2025/09/01 11:20:26 fetching corpus: 2496, signal 129165/161785 (executing program) 2025/09/01 11:20:26 fetching corpus: 2546, signal 129977/162745 (executing program) 2025/09/01 11:20:27 fetching corpus: 2596, signal 130879/163732 (executing program) 2025/09/01 11:20:27 fetching corpus: 2646, signal 131551/164609 (executing program) 2025/09/01 11:20:27 fetching corpus: 2696, signal 132596/165675 (executing program) 2025/09/01 11:20:27 fetching corpus: 2746, signal 133404/166607 (executing program) 2025/09/01 11:20:27 fetching corpus: 2796, signal 134291/167550 (executing program) 2025/09/01 11:20:27 fetching corpus: 2846, signal 135137/168521 (executing program) 2025/09/01 11:20:27 fetching corpus: 2896, signal 135827/169378 (executing program) 2025/09/01 11:20:27 fetching corpus: 2946, signal 136956/170378 (executing program) 2025/09/01 11:20:27 fetching corpus: 2996, signal 137680/171169 (executing program) 2025/09/01 11:20:27 fetching corpus: 3046, signal 138193/171933 (executing program) 2025/09/01 11:20:27 fetching corpus: 3096, signal 139070/172785 (executing program) 2025/09/01 11:20:28 fetching corpus: 3146, signal 139558/173496 (executing program) 2025/09/01 11:20:28 fetching corpus: 3196, signal 140494/174259 (executing program) 2025/09/01 11:20:28 fetching corpus: 3246, signal 141372/175017 (executing program) 2025/09/01 11:20:28 fetching corpus: 3296, signal 141899/175746 (executing program) 2025/09/01 11:20:28 fetching corpus: 3346, signal 142270/176394 (executing program) 2025/09/01 11:20:28 fetching corpus: 3396, signal 142920/177071 (executing program) 2025/09/01 11:20:28 fetching corpus: 3446, signal 143560/177789 (executing program) 2025/09/01 11:20:28 fetching corpus: 3496, signal 144212/178426 (executing program) 2025/09/01 11:20:28 fetching corpus: 3546, signal 144673/179033 (executing program) 2025/09/01 11:20:28 fetching corpus: 3596, signal 145384/179679 (executing program) 2025/09/01 11:20:29 fetching corpus: 3646, signal 145916/180258 (executing program) 2025/09/01 11:20:29 fetching corpus: 3696, signal 146716/180889 (executing program) 2025/09/01 11:20:29 fetching corpus: 3746, signal 147408/181470 (executing program) 2025/09/01 11:20:29 fetching corpus: 3796, signal 147922/182014 (executing program) 2025/09/01 11:20:29 fetching corpus: 3846, signal 148367/182549 (executing program) 2025/09/01 11:20:29 fetching corpus: 3896, signal 149497/183189 (executing program) 2025/09/01 11:20:29 fetching corpus: 3946, signal 149928/183665 (executing program) 2025/09/01 11:20:29 fetching corpus: 3996, signal 150522/184176 (executing program) 2025/09/01 11:20:29 fetching corpus: 4046, signal 151322/184760 (executing program) 2025/09/01 11:20:29 fetching corpus: 4096, signal 151693/185191 (executing program) 2025/09/01 11:20:29 fetching corpus: 4146, signal 152219/185705 (executing program) 2025/09/01 11:20:30 fetching corpus: 4196, signal 152704/186163 (executing program) 2025/09/01 11:20:30 fetching corpus: 4246, signal 153275/186641 (executing program) 2025/09/01 11:20:30 fetching corpus: 4296, signal 153698/187045 (executing program) 2025/09/01 11:20:30 fetching corpus: 4346, signal 154059/187424 (executing program) 2025/09/01 11:20:30 fetching corpus: 4396, signal 154680/187857 (executing program) 2025/09/01 11:20:30 fetching corpus: 4446, signal 155471/188290 (executing program) 2025/09/01 11:20:30 fetching corpus: 4496, signal 155927/188677 (executing program) 2025/09/01 11:20:30 fetching corpus: 4546, signal 156584/189029 (executing program) 2025/09/01 11:20:30 fetching corpus: 4596, signal 157039/189421 (executing program) 2025/09/01 11:20:30 fetching corpus: 4646, signal 157751/189641 (executing program) 2025/09/01 11:20:30 fetching corpus: 4696, signal 158127/189655 (executing program) 2025/09/01 11:20:31 fetching corpus: 4746, signal 158558/189655 (executing program) 2025/09/01 11:20:31 fetching corpus: 4796, signal 158873/189661 (executing program) 2025/09/01 11:20:31 fetching corpus: 4846, signal 159167/189685 (executing program) 2025/09/01 11:20:31 fetching corpus: 4896, signal 159574/189702 (executing program) 2025/09/01 11:20:31 fetching corpus: 4946, signal 159987/189706 (executing program) 2025/09/01 11:20:31 fetching corpus: 4996, signal 160674/189707 (executing program) 2025/09/01 11:20:31 fetching corpus: 5046, signal 160971/189711 (executing program) 2025/09/01 11:20:31 fetching corpus: 5096, signal 161442/189722 (executing program) 2025/09/01 11:20:31 fetching corpus: 5146, signal 161812/189728 (executing program) 2025/09/01 11:20:31 fetching corpus: 5196, signal 162274/189739 (executing program) 2025/09/01 11:20:31 fetching corpus: 5246, signal 162626/189743 (executing program) 2025/09/01 11:20:31 fetching corpus: 5296, signal 163018/189745 (executing program) 2025/09/01 11:20:32 fetching corpus: 5346, signal 163440/189752 (executing program) 2025/09/01 11:20:32 fetching corpus: 5396, signal 163772/189752 (executing program) 2025/09/01 11:20:32 fetching corpus: 5446, signal 164171/189757 (executing program) 2025/09/01 11:20:32 fetching corpus: 5496, signal 164642/189764 (executing program) 2025/09/01 11:20:32 fetching corpus: 5546, signal 165047/189764 (executing program) 2025/09/01 11:20:32 fetching corpus: 5596, signal 165363/189768 (executing program) 2025/09/01 11:20:32 fetching corpus: 5646, signal 165654/189777 (executing program) 2025/09/01 11:20:32 fetching corpus: 5696, signal 165991/189779 (executing program) 2025/09/01 11:20:32 fetching corpus: 5746, signal 166628/189783 (executing program) 2025/09/01 11:20:32 fetching corpus: 5796, signal 167526/189811 (executing program) 2025/09/01 11:20:32 fetching corpus: 5846, signal 167865/189817 (executing program) 2025/09/01 11:20:32 fetching corpus: 5896, signal 168211/189854 (executing program) 2025/09/01 11:20:33 fetching corpus: 5946, signal 168416/189863 (executing program) 2025/09/01 11:20:33 fetching corpus: 5996, signal 168637/189872 (executing program) 2025/09/01 11:20:33 fetching corpus: 6046, signal 168944/189884 (executing program) 2025/09/01 11:20:33 fetching corpus: 6096, signal 169333/189890 (executing program) 2025/09/01 11:20:33 fetching corpus: 6146, signal 169796/189894 (executing program) 2025/09/01 11:20:33 fetching corpus: 6196, signal 170445/189899 (executing program) 2025/09/01 11:20:33 fetching corpus: 6246, signal 171057/189899 (executing program) 2025/09/01 11:20:33 fetching corpus: 6296, signal 171437/189960 (executing program) 2025/09/01 11:20:33 fetching corpus: 6346, signal 171793/189964 (executing program) 2025/09/01 11:20:33 fetching corpus: 6396, signal 172284/189968 (executing program) 2025/09/01 11:20:33 fetching corpus: 6446, signal 172828/190078 (executing program) 2025/09/01 11:20:34 fetching corpus: 6496, signal 173206/190101 (executing program) 2025/09/01 11:20:34 fetching corpus: 6546, signal 173550/190106 (executing program) 2025/09/01 11:20:34 fetching corpus: 6596, signal 173951/190111 (executing program) 2025/09/01 11:20:34 fetching corpus: 6646, signal 174327/190142 (executing program) 2025/09/01 11:20:34 fetching corpus: 6696, signal 174629/190143 (executing program) 2025/09/01 11:20:34 fetching corpus: 6746, signal 174997/190160 (executing program) 2025/09/01 11:20:34 fetching corpus: 6796, signal 175410/190162 (executing program) 2025/09/01 11:20:34 fetching corpus: 6846, signal 175824/190175 (executing program) 2025/09/01 11:20:34 fetching corpus: 6896, signal 176208/190183 (executing program) 2025/09/01 11:20:34 fetching corpus: 6946, signal 176441/190199 (executing program) 2025/09/01 11:20:34 fetching corpus: 6996, signal 176691/190212 (executing program) 2025/09/01 11:20:34 fetching corpus: 7046, signal 177082/190214 (executing program) 2025/09/01 11:20:34 fetching corpus: 7096, signal 177485/190249 (executing program) 2025/09/01 11:20:35 fetching corpus: 7146, signal 177815/190251 (executing program) 2025/09/01 11:20:35 fetching corpus: 7196, signal 178103/190256 (executing program) 2025/09/01 11:20:35 fetching corpus: 7246, signal 178867/190264 (executing program) 2025/09/01 11:20:35 fetching corpus: 7296, signal 179113/190265 (executing program) 2025/09/01 11:20:35 fetching corpus: 7346, signal 179500/190265 (executing program) 2025/09/01 11:20:35 fetching corpus: 7396, signal 179761/190274 (executing program) 2025/09/01 11:20:35 fetching corpus: 7446, signal 180098/190279 (executing program) 2025/09/01 11:20:35 fetching corpus: 7496, signal 180331/190279 (executing program) 2025/09/01 11:20:35 fetching corpus: 7546, signal 180649/190281 (executing program) 2025/09/01 11:20:35 fetching corpus: 7596, signal 180898/190282 (executing program) 2025/09/01 11:20:35 fetching corpus: 7646, signal 181148/190298 (executing program) 2025/09/01 11:20:36 fetching corpus: 7696, signal 181351/190309 (executing program) 2025/09/01 11:20:36 fetching corpus: 7746, signal 181612/190315 (executing program) 2025/09/01 11:20:36 fetching corpus: 7796, signal 182001/190327 (executing program) 2025/09/01 11:20:36 fetching corpus: 7846, signal 182323/190331 (executing program) 2025/09/01 11:20:36 fetching corpus: 7896, signal 182655/190337 (executing program) 2025/09/01 11:20:36 fetching corpus: 7946, signal 183010/190346 (executing program) 2025/09/01 11:20:36 fetching corpus: 7996, signal 183308/190354 (executing program) 2025/09/01 11:20:36 fetching corpus: 8046, signal 183687/190357 (executing program) 2025/09/01 11:20:36 fetching corpus: 8096, signal 184023/190362 (executing program) 2025/09/01 11:20:37 fetching corpus: 8146, signal 184286/190367 (executing program) 2025/09/01 11:20:37 fetching corpus: 8196, signal 185905/190375 (executing program) 2025/09/01 11:20:37 fetching corpus: 8246, signal 186182/190377 (executing program) 2025/09/01 11:20:37 fetching corpus: 8296, signal 186505/190378 (executing program) 2025/09/01 11:20:37 fetching corpus: 8346, signal 186796/190390 (executing program) 2025/09/01 11:20:37 fetching corpus: 8396, signal 187234/190417 (executing program) 2025/09/01 11:20:37 fetching corpus: 8445, signal 187649/190419 (executing program) 2025/09/01 11:20:37 fetching corpus: 8445, signal 187649/190419 (executing program) 2025/09/01 11:20:39 starting 8 fuzzer processes 11:20:39 executing program 0: socket$netlink(0x10, 0x3, 0xe) 11:20:39 executing program 1: sched_rr_get_interval(0x0, &(0x7f0000000000)) 11:20:40 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", "a17dfcb460646196dff50ec71ded0b59", {"a979159a1b08243b764e33f13a6a2006", "a8e72dde502d5382c448b363b844c5e6"}}}}}}}, 0x0) 11:20:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1, 0x9}, 0x20) 11:20:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{0x5e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 79.350623] audit: type=1400 audit(1756725640.118:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:20:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0) 11:20:40 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r0, 0x0, &(0x7f0000000300)) 11:20:40 executing program 6: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002480)) [ 80.540019] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.544090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.546125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.550030] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.552598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.607223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.610286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.613094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.616080] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.617561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.621963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.636177] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.638443] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.639597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.646859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.676832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.695555] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.698139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.708621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.713984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.734347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.753225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.758024] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.771419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.775029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.778335] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.788117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.792698] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.813551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.817575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.820919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.834635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.837003] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.851054] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.851931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.871951] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.878145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.881584] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.891952] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.902476] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.568995] Bluetooth: hci0: command tx timeout [ 82.696784] Bluetooth: hci1: command tx timeout [ 82.697463] Bluetooth: hci2: command tx timeout [ 82.760715] Bluetooth: hci3: command tx timeout [ 82.824773] Bluetooth: hci4: command tx timeout [ 82.890407] Bluetooth: hci5: command tx timeout [ 82.953872] Bluetooth: hci6: command tx timeout [ 82.954416] Bluetooth: hci7: command tx timeout [ 84.618160] Bluetooth: hci0: command tx timeout [ 84.745708] Bluetooth: hci2: command tx timeout [ 84.746172] Bluetooth: hci1: command tx timeout [ 84.808750] Bluetooth: hci3: command tx timeout [ 84.873754] Bluetooth: hci4: command tx timeout [ 84.937752] Bluetooth: hci5: command tx timeout [ 85.001715] Bluetooth: hci6: command tx timeout [ 85.002168] Bluetooth: hci7: command tx timeout [ 86.665712] Bluetooth: hci0: command tx timeout [ 86.793855] Bluetooth: hci1: command tx timeout [ 86.794289] Bluetooth: hci2: command tx timeout [ 86.857772] Bluetooth: hci3: command tx timeout [ 86.921221] Bluetooth: hci4: command tx timeout [ 86.984867] Bluetooth: hci5: command tx timeout [ 87.049748] Bluetooth: hci6: command tx timeout [ 87.050191] Bluetooth: hci7: command tx timeout [ 88.713719] Bluetooth: hci0: command tx timeout [ 88.843716] Bluetooth: hci2: command tx timeout [ 88.844174] Bluetooth: hci1: command tx timeout [ 88.906100] Bluetooth: hci3: command tx timeout [ 88.969692] Bluetooth: hci4: command tx timeout [ 89.033822] Bluetooth: hci5: command tx timeout [ 89.097727] Bluetooth: hci7: command tx timeout [ 89.098212] Bluetooth: hci6: command tx timeout [ 121.521901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.522567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.716704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.717320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.855778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.856392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.991465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.992224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.176221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.176867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.309720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.310343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.430038] audit: type=1400 audit(1756725683.202:8): avc: denied { open } for pid=3837 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.431827] audit: type=1400 audit(1756725683.202:9): avc: denied { kernel } for pid=3837 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.445728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.446340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:21:23 executing program 7: r0 = epoll_create(0xe9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xd000200a}) [ 122.558765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.559384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:21:23 executing program 5: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 11:21:23 executing program 7: r0 = epoll_create(0xe9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xd000200a}) [ 122.698687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.699312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:21:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{0x5e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 11:21:23 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003c80), 0x208402, 0x0) fcntl$setflags(r0, 0x2, 0x1) 11:21:23 executing program 7: r0 = epoll_create(0xe9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xd000200a}) 11:21:23 executing program 7: r0 = epoll_create(0xe9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xd000200a}) 11:21:23 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003c80), 0x208402, 0x0) fcntl$setflags(r0, 0x2, 0x1) [ 122.864915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.865546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.986462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.987365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.090114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.091687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.160945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.161565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.177309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.177947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.227830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.228443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.263130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.263831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:21:24 executing program 0: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private2, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="19c841e1d14cb881ceb01ac8ddd761c9faa1c9d2e19cecd35ec21461da67a620045204f05f52fd7e3687b84e90e8bff03daf", 0x32, 0x200}], 0x3089012, &(0x7f0000000440)={[{@block}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2040, 0x1c) r0 = perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x3, 0xfffffffffffffe00}, 0x40085, 0x5cf6, 0x5, 0x4, 0x4, 0x100, 0x0, 0x0, 0x9, 0x0, 0x81}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x9) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0x0, 0xff, 0x80, 0xd9, 0x0, 0x2, 0x4088, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x10018, 0x7e38, 0x2, 0x4, 0x3, 0x0, 0x200, 0x0, 0x944, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r0, 0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f80), 0xffffffffffffffff) 11:21:24 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, {0x11, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "00e00000"}}}}}, 0x0) 11:21:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 11:21:24 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short}, 0xb) 11:21:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1, 0x9}, 0x20) 11:21:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{0x5e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 11:21:24 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003c80), 0x208402, 0x0) fcntl$setflags(r0, 0x2, 0x1) 11:21:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000010000000000000020000000000010bb"], 0x24, 0x0) [ 123.439275] loop0: detected capacity change from 0 to 2 [ 123.462275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.471778] loop0: detected capacity change from 0 to 2 [ 123.471977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:21:24 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short}, 0xb) 11:21:24 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) 11:21:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{0x5e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 11:21:24 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003c80), 0x208402, 0x0) fcntl$setflags(r0, 0x2, 0x1) 11:21:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1, 0x9}, 0x20) 11:21:24 executing program 1: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0}) 11:21:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000010000000000000020000000000010bb"], 0x24, 0x0) 11:21:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') pread64(r0, &(0x7f00000001c0)=""/195, 0xc3, 0x3ffffffffffffd) 11:21:24 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short}, 0xb) 11:21:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3a, 0x0, &(0x7f0000001180)) 11:21:24 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = socket(0xa, 0x3, 0x5) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 11:21:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1, 0x9}, 0x20) 11:21:24 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 11:21:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000010000000000000020000000000010bb"], 0x24, 0x0) 11:21:24 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000500)={0x19, 0x0, 0x9}, 0x0) [ 123.712255] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 11:21:24 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x20850) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) 11:21:24 executing program 4: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fed000/0x13000)=nil, 0x13000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 11:21:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000000)) 11:21:24 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 11:21:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000010000000000000020000000000010bb"], 0x24, 0x0) [ 124.678142] Bluetooth: hci0: Opcode 0x0c20 failed: -4 11:21:25 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short}, 0xb) 11:21:25 executing program 4: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:21:25 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000500)={0x19, 0x0, 0x9}, 0x0) 11:21:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') pread64(r0, &(0x7f00000001c0)=""/195, 0xc3, 0x3ffffffffffffd) 11:21:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000000)={'bridge0\x00'}) 11:21:25 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_open_dev$mouse(0x0, 0x0, 0x0) 11:21:25 executing program 1: r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) r2 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) close(r3) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r3) 11:21:25 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mbind(&(0x7f000056b000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080), 0x6, 0x3) 11:21:25 executing program 5: eventfd2(0x0, 0xc01) 11:21:25 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) [ 124.827233] kmemleak: Found object by alias at 0x607f1a63e7d0 [ 124.827256] CPU: 0 UID: 0 PID: 3984 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 124.827275] Tainted: [W]=WARN [ 124.827278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.827286] Call Trace: [ 124.827290] [ 124.827295] dump_stack_lvl+0xca/0x120 [ 124.827322] __lookup_object+0x94/0xb0 [ 124.827340] delete_object_full+0x27/0x70 [ 124.827356] free_percpu+0x30/0x1160 [ 124.827374] ? arch_uprobe_clear_state+0x16/0x140 [ 124.827396] futex_hash_free+0x38/0xc0 [ 124.827411] mmput+0x2d3/0x390 [ 124.827430] do_exit+0x79d/0x2970 [ 124.827445] ? lock_release+0xc8/0x290 [ 124.827463] ? __pfx_do_exit+0x10/0x10 [ 124.827477] ? find_held_lock+0x2b/0x80 [ 124.827495] ? get_signal+0x835/0x2340 [ 124.827516] do_group_exit+0xd3/0x2a0 [ 124.827531] get_signal+0x2315/0x2340 [ 124.827550] ? __pfx_copy_siginfo_from_user+0x10/0x10 [ 124.827566] ? __pfx_get_signal+0x10/0x10 [ 124.827597] ? do_futex+0x135/0x370 [ 124.827612] ? __pfx_do_futex+0x10/0x10 [ 124.827628] arch_do_signal_or_restart+0x80/0x790 [ 124.827650] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 124.827667] ? __x64_sys_futex+0x1c9/0x4d0 [ 124.827679] ? __x64_sys_futex+0x1d2/0x4d0 [ 124.827695] ? __pfx___x64_sys_futex+0x10/0x10 [ 124.827711] ? fput+0x6a/0x100 [ 124.827729] exit_to_user_mode_loop+0x8b/0x110 [ 124.827743] do_syscall_64+0x2f7/0x360 [ 124.827756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.827768] RIP: 0033:0x7ff9231a4b19 [ 124.827777] Code: Unable to access opcode bytes at 0x7ff9231a4aef. [ 124.827783] RSP: 002b:00007ff92071a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca 11:21:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='debugfs\x00', &(0x7f0000000040)=':-\x00', 0x0) [ 124.827794] RAX: fffffffffffffe00 RBX: 00007ff9232b7f68 RCX: 00007ff9231a4b19 [ 124.827802] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9232b7f68 [ 124.827809] RBP: 00007ff9232b7f60 R08: 0000000000000000 R09: 0000000000000000 [ 124.827816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9232b7f6c [ 124.827823] R13: 00007ffdb64ccecf R14: 00007ff92071a300 R15: 0000000000022000 [ 124.827840] [ 124.827844] kmemleak: Object (percpu) 0x607f1a63e7cc (size 8): [ 124.827851] kmemleak: comm "syz-executor.4", pid 3985, jiffies 4294791555 [ 124.827858] kmemleak: min_count = 1 [ 124.827862] kmemleak: count = 0 [ 124.827866] kmemleak: flags = 0x21 [ 124.827870] kmemleak: checksum = 0 [ 124.827873] kmemleak: backtrace: [ 124.827877] pcpu_alloc_noprof+0x87a/0x1170 [ 124.827893] alloc_vfsmnt+0x135/0x6e0 [ 124.827907] clone_mnt+0x6c/0xb70 [ 124.827921] copy_tree+0x105/0xaf0 [ 124.827932] copy_mnt_ns+0x1ab/0xab0 [ 124.827943] create_new_namespaces+0xd6/0xab0 [ 124.827960] copy_namespaces+0x45c/0x580 [ 124.827975] copy_process+0x2649/0x73c0 [ 124.827985] kernel_clone+0xea/0x7f0 [ 124.827995] __do_sys_clone3+0x1f5/0x280 [ 124.828006] do_syscall_64+0xbf/0x360 [ 124.828015] entry_SYSCALL_64_after_hwframe+0x77/0x7f 11:21:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x9effffff}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}}, 0x0) 11:21:25 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000500)={0x19, 0x0, 0x9}, 0x0) 11:21:25 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mbind(&(0x7f000056b000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080), 0x6, 0x3) 11:21:25 executing program 5: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) 11:21:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') pread64(r0, &(0x7f00000001c0)=""/195, 0xc3, 0x3ffffffffffffd) 11:21:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2287, &(0x7f0000000000)) 11:21:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='debugfs\x00', &(0x7f0000000040)=':-\x00', 0x0) 11:21:25 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 11:21:25 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mbind(&(0x7f000056b000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080), 0x6, 0x3) 11:21:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2287, &(0x7f0000000000)) 11:21:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x9effffff}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}}, 0x0) 11:21:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') pread64(r0, &(0x7f00000001c0)=""/195, 0xc3, 0x3ffffffffffffd) 11:21:25 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 11:21:25 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000500)={0x19, 0x0, 0x9}, 0x0) 11:21:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='debugfs\x00', &(0x7f0000000040)=':-\x00', 0x0) 11:21:25 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 11:21:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2287, &(0x7f0000000000)) 11:21:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:21:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x9effffff}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}}, 0x0) 11:21:26 executing program 5: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) 11:21:26 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mbind(&(0x7f000056b000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080), 0x6, 0x3) 11:21:26 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='debugfs\x00', &(0x7f0000000040)=':-\x00', 0x0) 11:21:26 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0) 11:21:26 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/86, 0x56) 11:21:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x9effffff}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}}, 0x0) 11:21:26 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/86, 0x56) 11:21:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2287, &(0x7f0000000000)) 11:21:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:21:26 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0) 11:21:26 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/86, 0x56) 11:21:26 executing program 7: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) 11:21:26 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11:21:26 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 11:21:26 executing program 5: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) 11:21:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 11:21:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:21:26 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0) 11:21:26 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 11:21:26 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/86, 0x56) 11:21:26 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0) [ 125.757273] kmemleak: Found object by alias at 0x607f1a63e7d0 [ 125.757297] CPU: 1 UID: 0 PID: 4062 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 125.757316] Tainted: [W]=WARN [ 125.757321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 125.757328] Call Trace: [ 125.757333] [ 125.757338] dump_stack_lvl+0xca/0x120 [ 125.757373] __lookup_object+0x94/0xb0 [ 125.757392] delete_object_full+0x27/0x70 [ 125.757409] free_percpu+0x30/0x1160 [ 125.757427] ? arch_uprobe_clear_state+0x16/0x140 [ 125.757448] futex_hash_free+0x38/0xc0 [ 125.757464] mmput+0x2d3/0x390 [ 125.757483] do_exit+0x79d/0x2970 [ 125.757497] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 125.757512] ? zap_other_threads+0x2b9/0x3a0 [ 125.757530] ? __pfx_do_exit+0x10/0x10 [ 125.757543] ? do_group_exit+0x1c3/0x2a0 [ 125.757558] ? _raw_spin_unlock_irq+0x23/0x40 [ 125.757578] do_group_exit+0xd3/0x2a0 [ 125.757593] __x64_sys_exit_group+0x3e/0x50 [ 125.757607] x64_sys_call+0x18c5/0x18d0 [ 125.757623] do_syscall_64+0xbf/0x360 [ 125.757637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.757654] RIP: 0033:0x7ff9231a4b19 [ 125.757664] Code: Unable to access opcode bytes at 0x7ff9231a4aef. [ 125.757669] RSP: 002b:00007ffdb64cd0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 125.757681] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007ff9231a4b19 [ 125.757689] RDX: 00007ff92315772b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 125.757697] RBP: 0000000000000000 R08: 0000001b2d22276c R09: 0000000000000000 [ 125.757705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.757712] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdb64cd1e0 [ 125.757728] [ 125.757731] kmemleak: Object (percpu) 0x607f1a63e7cc (size 8): [ 125.757739] kmemleak: comm "syz-executor.4", pid 4071, jiffies 4294792515 [ 125.757746] kmemleak: min_count = 1 [ 125.757750] kmemleak: count = 0 [ 125.757754] kmemleak: flags = 0x21 [ 125.757758] kmemleak: checksum = 0 [ 125.757762] kmemleak: backtrace: [ 125.757766] pcpu_alloc_noprof+0x87a/0x1170 [ 125.757782] alloc_vfsmnt+0x135/0x6e0 [ 125.757797] vfs_create_mount.part.0+0x40/0x440 [ 125.757812] path_mount+0x1637/0x1dd0 [ 125.757825] __x64_sys_mount+0x27b/0x300 [ 125.757837] do_syscall_64+0xbf/0x360 [ 125.757846] entry_SYSCALL_64_after_hwframe+0x77/0x7f 11:21:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) vmsplice(r0, &(0x7f00000008c0)=[{&(0x7f0000000200)="f4", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x802, 0x0) 11:21:26 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 11:21:26 executing program 5: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) 11:21:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:21:26 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x3, &(0x7f0000004140)=[{&(0x7f0000003bc0)='\\', 0x1}, {&(0x7f0000003f80)="fd", 0x1, 0xb31b}, {&(0x7f0000004000)="87", 0x1}], 0x0, 0x0) 11:21:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040841, 0x0, 0x0) [ 125.897754] Bluetooth: hci0: command 0x0c20 tx timeout 11:21:26 executing program 7: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) 11:21:26 executing program 6: socket$inet6(0xa, 0x2, 0x0) 11:21:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) vmsplice(r0, &(0x7f00000008c0)=[{&(0x7f0000000200)="f4", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x802, 0x0) 11:21:26 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 11:21:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 11:21:26 executing program 0: pwritev2(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000140)="1b", 0x1}, {&(0x7f0000000180)}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) syz_read_part_table(0x0, 0x65021, &(0x7f0000000180)=[{&(0x7f0000000080)="82", 0x1}]) 11:21:26 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000001900)={0x38}, 0x86, 0x0) 11:21:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) vmsplice(r0, &(0x7f00000008c0)=[{&(0x7f0000000200)="f4", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x802, 0x0) 11:21:26 executing program 7: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) 11:21:26 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 11:21:26 executing program 5: clock_gettime(0x8, &(0x7f0000000000)) 11:21:26 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 11:21:26 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x161c03, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x800) 11:21:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) vmsplice(r0, &(0x7f00000008c0)=[{&(0x7f0000000200)="f4", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x802, 0x0) 11:21:27 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x2400000, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xb3e7) 11:21:27 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 11:21:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x4400}, 0x1c) 11:21:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x33, 0x0, 0x0) 11:21:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x5412, &(0x7f00000000c0)=""/4096) 11:21:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000001940)=[{0x0}, {0x0}, {&(0x7f0000001880), 0x0, 0x401}], 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@nr_inodes}], [{@fsmagic}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b40), 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 11:21:27 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) 11:21:27 executing program 0: pwritev2(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000140)="1b", 0x1}, {&(0x7f0000000180)}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) syz_read_part_table(0x0, 0x65021, &(0x7f0000000180)=[{&(0x7f0000000080)="82", 0x1}]) 11:21:27 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') fstatfs(r0, &(0x7f0000000040)=""/158) [ 127.098841] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 11:21:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000001940)=[{0x0}, {0x0}, {&(0x7f0000001880), 0x0, 0x401}], 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@nr_inodes}], [{@fsmagic}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b40), 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 11:21:27 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 11:21:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2b, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@ceph_nfs_snapfh={0x1c}, 0x0, 0x3) 11:21:27 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') fstatfs(r0, &(0x7f0000000040)=""/158) 11:21:27 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f00000001c0)={0xec4, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "8f95233490371128c9f024b57820c555638c49572452560371ae64a4de0e1fa6f85c03816d156032742ef5ae866e8268f638153dc462a2861a0cbe290bbe19e88c638ca06facda4a46baf5dd365a496e9ae8d5d536993276a0a33d2a7928c8a7198b0294ac761b1ad3b84a6db36f922368a237ce1c8e5bbc165ca8cb8b06af50fb601e213420f6cd63379c48182018a7fcacb41f0964db3f0e4185892968ceb1688115f9506682f9652a7f0261b7c93cd452f688873e2207d20be61a65da17a2872b06ce86892b0f1ced85112311b9608ce1da197c763035073c468a6494c10bb7e3d3b6fcc7d1185c9f9a20713c77ed0231abffe60ff2aa90"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "a5e48f6f48877dd2051abbb641e079a88c7e208d11d4d4a7e7cab4d9d52a83e41dd735cb976112d431c228a6641f5b23aa5cba3dfb11b95ca6062c3dcc472c753270ff7e1c5dc160e013268a8ce6d03a83fa03f85914e2605985f4a2a6827091d6d7a38bdac9803f089bdb9e8880fd43f5a4904dd03ae279d31c200746e1abdc39d2d1dbe2f4abeaf0b3644e57"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "474fbaf0253a42bb733b8ebbcae5eb9f589438c312255f5e0451cb76238c45fa99603ff33863d7aee2381a8e7c94484861ff9912fff5bd9281591bc3b9d1770fead1b26b68771114c84c38f0861bbc900479414a129c52f1f894bd30951c72f4b1b4a58b9ec6abb4717dd1a56f0db6c1e2390c1f416fc758413ae9d05ca772c9d41b435315f5d379fa3d85bd270a890479ff3b183a63cdb79396892431e14f76dc47e0bf673f1103912117409e22cba3e69c3e5d01279862c5"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "5ab2b51262cbe6861c7bf46f1332152122050616d1a5b9f70a0fb9e8fa29fa8f4b78e4e4e6aafa4580dd00c562b9f0804469d828598ba36f3c19c019fe347462fd016a14fb727d36e3"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "3c2df14a6ea8dda34911c554fd5c8c4296bfb1ebdbcc78ea06e578ed3ea618b3e4cef363cb8640511a06371dd8515fa40aca2419af46b8f29f7a50e4af9edb468719cb8c801f0dc17c6b4254615acad28a036bb3e14eba730d8e0e961815d81f30b6064267037f06670558e4911588cdc9"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "6f5988b78f"}, @INET_DIAG_REQ_BYTECODE={0xb4d, 0x1, "d4560134583f9041bf89a0adfc6f859a664d86eb03faab15776751fcde2c14343c20fe5091cc5b12403d22cdf17a7cf26b76e504119cc92cb7d0ce180cc600c5087290a044eaf6caecd0cbab7ae37bee2c911ec5c15ca120a9a70c8c0e19a1a4875d80a0b40239a010de549757ea9bb24b31197c51d2235de27e3b85ff64071eee9dc4d8085e2f61cdc12293f1f1186e7a21b5502fc7dccc4a329a50745bcabcdfaa75c5be7989928600eefaaaac311d8aedd813ffcdfc4994be2f7370b55bd863a2e9539f69e62a01773f05cf3b9349503836284000b35e0a4d15901340520c3e84b19adc13af385f24ef6a1a16e5b721f682ed2dda768866db5367b7ea93a8a00bc140d197a2606ac694df76e31fab93c5dd1cf1e8440a83099c3dffed67195896e2a25ef8ab5fbb020618a7939d9106e2900c0652ae941f607e929549bbb6db3cd38d76db71e4700ae5c3ec86c13e4bc69a9a2a4963f506050b2e783177127750c3ff153739e800690e4b9e11aac2bcc8fba26b58e8d5df6edf7c30b9b02d08dffb2ec8ab84d9704449210c1ce0fb8d01cfd9fa2a6335779f66dc8bfb00d257744bb0df7b3fc1b031dc9495f538ca824263664502e261bae08b9269e6c6f23789214c75fdce675e9030aca95320fe99435032a0a0dd2258f2c1aeaeacdfdc5a158d3384cd434a1dbb39f05c8b2a58f2b671f041f4c693065288baf15b6700be59135a3e8c7f81528bf403ae70dd3322f0f071dfacdd297a355214fe84a49b17d6193e77bbbace0deebc7d8bba6175a8662dfbb83617dc16c2456e1b279a05975ec621218f2077e8915ad7a5e3cd03bf4b965b440692cb10d76eb31a4ce196954cfbf3daba8a227ea6b2079efdccde5ffd3cc6fac04db1505266ed77b246e7e3ba188c6fc66a2913023bd0f6acab1ca4ede30dcb91d83ba93e5d55e80de2e86e1da213c4f0f55005424be1c006ea2c63753a0c0c809be968bcbdebad3699c02802e218687ea3f3400f77e27d059911245005731e995bb0e59a163011b1720e9b5d1b5890cf01abe37b86b39fc61b59fe0f65bdfa61998d7db70bae4c27480a02677b3069cb864c93f54d32672278f2ed966d13273bd6143f82fe64b8094940d50c448fdbc5d7dfa1ba3b215091cdf4d44dfe5a3f2b1ac41c237fcfbdddc69ff959010a0e676e7601062c5f8401debbfc1a4bf4fc981786533cf911c1398c6d0f818c67f2e666fd91a4b6e59739f8755b7269ecdc1ec40d2c1be3b1f50617247442a09abea52008b4566b0e8015444cc973c61edf1e5b89899195d01ab2638758777a5ae83c7648468e024adbaa4b2dae09b8cc5d27e5fb551071c3123718617d2675504446699c5377085cfd58f9568824a54d70515483611f8ca89b2e33a1f1207ece1ea373cbf52fbc224cf1ac00106a371683f305784b4a5711ae9f9972ce49bf45383a234abf594ca1a385f2ca4d66cec1324c2d412c1e87b7192d15af7b0fe3e310f6a235a46f2fa8b8d908e283263ee530b8e830d16368e9ce306d280961808327837638805614dc5be835b8566b4943fed4fa75c989c11dbbec029d1510758a807b196a11473fa7829e6caf5e00f36b14d010e133e3b9b4693bd50f4b75b1e1a796edd2fce8996e6b567bbf8ba23d58d0d58237caf9c486351a1bdbab8f95e7ad0096441be3693ab4e8b622d3eed2bf607b078620b5421d96bd40e079a9fc9287e74a64a208170fc1de15785fb9ec6f1091f7b9efb9647f0e443fdd10a0b11514da7a67869cf08354474ad78fd52d4960f7df1c0a5384a5302ed91b1eb27efb0679440bbb962b171798ccfce70956ccc6d3238c077c45fad83d461acd2f7f373fd63f6d50a40105bcb33f3aff8182027c6ba788cfbaa040592be8a33f9f7fcfb43164cbab581607b0e9896c386f1e7be4c111f3f08c046103a4f33820d29bb30e85208d6a17bc284033def03382239cc5578f58ec10acf8b1cbdf42bba38fce31ebafb19b6e050a453630a95c49cff10cc25b09f67bb8564c32f575188cac4bbf3f4c833df659498813d617f5f684917fc486e98014f52a734156c6a45f56c4a5c779982bd69ad9568e329c53e395d8b04cf5767f85b90d16d8038abaff53ab153099ab0f5ac7e59552900850d6bf90336f6404f91b6d0b36b7cfa34e0a301685d64025ab0d9d604f7b5c8824d67fdb23ec74991b2c593e4e30fa4a235d599a122f7076030fd94352d193ce3e737def89935aa18ddc4c9d33ef54315a7e4fa1a5ef379db78cddec31062bf80e77b503c2baaaaf160269c4a7495b58b5f8b557b5080bd04d3c2da8e6f56f409fef93ce003bc64dacf2ced65656e35aff17653493688c33c81bb864d2b9ad6368f988c087191b81140458d33ab35e3a0bddccf67482fadc600a58143f81ea4be062d0ab1fb9b4160dff1414358ab1eb276a81040c982f9831c0bc77c9dff0b5c697cb6a95b6a8ac7ce58a03152b9d7d1204c43d6f9d1ff25f18f4256392978e2df8582481976764a4d3e0fc00b02d3c98e6be6c91c9b37fe7625522f3ecdaa29120c990928d5d60dbee2a341d905cd632206807c36d5016a1333c1b1c63a85a0310cd692b0ae85f30688fe78792aea36fef8991ca03fbe03e7d60a0e47ec6e40788c7af99850c42f03c310d1b0b214aab8c72bb7c07c566454119815d744643610cc47b2ad894124d923706e52c0f3d6f1e26d2a43fa817f1adf88a899590e2db821ae29f3bf05cee685c128fba5ded02e8c83df1ebe5c7d92a0b08bcc41f96a92a58b1b78575ea68656c5bb832ba0b1d7b15de3040471f2dc9275448147ae46d4b07465b9cf11ba9ddb96e43a922ab585665fd564467441a81efd03a45d4fac7e2f5d0ffcba7156e176f40585907b01bda431763cd1aa55afe1c6910d6c823331c773e3118b23494dd8dc8634ab37f01e8e56f570b25883675c880c24f2db0b9c7f91953b9e3d09c5b4053f320ee625957bbe29ac5b5f8b9f84e2439189bff7a2e80bc012e07f5fcab899658b32115ee379e4d85d9aab74f8e9c8189779446202b6895a8f1a0e1929f7f68b157be6aa1bba6d7aa9b4f982226d589d778fb4eb1ed0daf66ffe135f43e4a2c7adec7eb612a24bfd1d7d8a7e8cb548e18bbb36b64b7eb8bf79c9bfbc943efb352181cd58f5f810eb9c355c226960d5251287259fab14a151af78ef412fca07eab2b6e7afcd37f9baee8d0b93761428b28f10c8ba5e016ec1672c57b4872542984997fe0d893d86a53faa70720c62cafc243a5e813ec8563d118e427a46f1252f3c1c2ef8eb42184d760b0e3f5515456a853ff7916cd537a2500b7a16ec179ddac60cd3fb47d0568b772ab42e99181a4e58baf1b5bb17c3c7902295acc9af44ed4675433e5399b1185b5aeef5751ce7d823356b335b8c830dae33985a679c2ba11e54dc66789322c03f9084214cfbb9ccc5ab2c27b6e24d2e193fa7f00b10d5c1c861c6a3d3a7fd8b362df1fb354df2faa41c2ce7429d9bd44de19c9e41ad9709a3a055ef8d7736892bc02e13de3c44c27995c7de253daace64ed6a2555d9cf37f6065e2782183ee55c20e7fa10b8729143c0e49fc16b51fd69e44be219474d24685de0e736d1e08d8fc399fa5547b11eda430290a304590efc9e40f6d8c21e5e17d4ec36428cab6a4193812f1ccc45b666da6303b96fa7d21c87c5ac1afbf98ffcbff58cf7ccaa9bf8c45d2235d92b323815b9421aa4e05335f88195a59d2d9fded3ccbf59ec9df0a94a78458e90305259d8b87505d77cd2938ea43cce41a32c736b2589c1b28203b006c70fb6efa850a3f96068d60a385e5e6c9a49d5522aebdbabd0b193750bf97968bb4774fd64775b7859799bdf68007bb57dbcb3cea38e3cc56b10612765f97ef966957809b62e72e812689616d1c59339e9580bc4b76a4e603fd38882a844736e6f8c82be7746c7aaf16d086d0eaee36f803beec370107db276f7320d687f7ae462d8a76228c8df9f043c65ff915a473f802e29507ce2a0a7abf888b3efe53448b0ba67adf720d54d74974ae3ee4ae320d4a0e924a6f86d4e8a303bb31a865f182b3bb"}]}, 0xec4}}, 0x0) 11:21:27 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000280)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=""/18, 0x12) 11:21:27 executing program 5: mlockall(0x6) 11:21:28 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') fstatfs(r0, &(0x7f0000000040)=""/158) 11:21:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2b, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@ceph_nfs_snapfh={0x1c}, 0x0, 0x3) 11:21:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000001940)=[{0x0}, {0x0}, {&(0x7f0000001880), 0x0, 0x401}], 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@nr_inodes}], [{@fsmagic}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b40), 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 11:21:28 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 11:21:28 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f00000001c0)={0xec4, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "8f95233490371128c9f024b57820c555638c49572452560371ae64a4de0e1fa6f85c03816d156032742ef5ae866e8268f638153dc462a2861a0cbe290bbe19e88c638ca06facda4a46baf5dd365a496e9ae8d5d536993276a0a33d2a7928c8a7198b0294ac761b1ad3b84a6db36f922368a237ce1c8e5bbc165ca8cb8b06af50fb601e213420f6cd63379c48182018a7fcacb41f0964db3f0e4185892968ceb1688115f9506682f9652a7f0261b7c93cd452f688873e2207d20be61a65da17a2872b06ce86892b0f1ced85112311b9608ce1da197c763035073c468a6494c10bb7e3d3b6fcc7d1185c9f9a20713c77ed0231abffe60ff2aa90"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "a5e48f6f48877dd2051abbb641e079a88c7e208d11d4d4a7e7cab4d9d52a83e41dd735cb976112d431c228a6641f5b23aa5cba3dfb11b95ca6062c3dcc472c753270ff7e1c5dc160e013268a8ce6d03a83fa03f85914e2605985f4a2a6827091d6d7a38bdac9803f089bdb9e8880fd43f5a4904dd03ae279d31c200746e1abdc39d2d1dbe2f4abeaf0b3644e57"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "474fbaf0253a42bb733b8ebbcae5eb9f589438c312255f5e0451cb76238c45fa99603ff33863d7aee2381a8e7c94484861ff9912fff5bd9281591bc3b9d1770fead1b26b68771114c84c38f0861bbc900479414a129c52f1f894bd30951c72f4b1b4a58b9ec6abb4717dd1a56f0db6c1e2390c1f416fc758413ae9d05ca772c9d41b435315f5d379fa3d85bd270a890479ff3b183a63cdb79396892431e14f76dc47e0bf673f1103912117409e22cba3e69c3e5d01279862c5"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "5ab2b51262cbe6861c7bf46f1332152122050616d1a5b9f70a0fb9e8fa29fa8f4b78e4e4e6aafa4580dd00c562b9f0804469d828598ba36f3c19c019fe347462fd016a14fb727d36e3"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "3c2df14a6ea8dda34911c554fd5c8c4296bfb1ebdbcc78ea06e578ed3ea618b3e4cef363cb8640511a06371dd8515fa40aca2419af46b8f29f7a50e4af9edb468719cb8c801f0dc17c6b4254615acad28a036bb3e14eba730d8e0e961815d81f30b6064267037f06670558e4911588cdc9"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "6f5988b78f"}, @INET_DIAG_REQ_BYTECODE={0xb4d, 0x1, "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"}]}, 0xec4}}, 0x0) 11:21:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 11:21:28 executing program 0: pwritev2(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000140)="1b", 0x1}, {&(0x7f0000000180)}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) syz_read_part_table(0x0, 0x65021, &(0x7f0000000180)=[{&(0x7f0000000080)="82", 0x1}]) 11:21:28 executing program 6: io_setup(0x0, 0xffffffffffffffff) 11:21:28 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x5410, &(0x7f0000000440)) 11:21:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000001940)=[{0x0}, {0x0}, {&(0x7f0000001880), 0x0, 0x401}], 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@nr_inodes}], [{@fsmagic}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b40), 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 11:21:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 11:21:28 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') fstatfs(r0, &(0x7f0000000040)=""/158) 11:21:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2b, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@ceph_nfs_snapfh={0x1c}, 0x0, 0x3) 11:21:28 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@isdn, 0x80) 11:21:28 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f00000001c0)={0xec4, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "8f95233490371128c9f024b57820c555638c49572452560371ae64a4de0e1fa6f85c03816d156032742ef5ae866e8268f638153dc462a2861a0cbe290bbe19e88c638ca06facda4a46baf5dd365a496e9ae8d5d536993276a0a33d2a7928c8a7198b0294ac761b1ad3b84a6db36f922368a237ce1c8e5bbc165ca8cb8b06af50fb601e213420f6cd63379c48182018a7fcacb41f0964db3f0e4185892968ceb1688115f9506682f9652a7f0261b7c93cd452f688873e2207d20be61a65da17a2872b06ce86892b0f1ced85112311b9608ce1da197c763035073c468a6494c10bb7e3d3b6fcc7d1185c9f9a20713c77ed0231abffe60ff2aa90"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "a5e48f6f48877dd2051abbb641e079a88c7e208d11d4d4a7e7cab4d9d52a83e41dd735cb976112d431c228a6641f5b23aa5cba3dfb11b95ca6062c3dcc472c753270ff7e1c5dc160e013268a8ce6d03a83fa03f85914e2605985f4a2a6827091d6d7a38bdac9803f089bdb9e8880fd43f5a4904dd03ae279d31c200746e1abdc39d2d1dbe2f4abeaf0b3644e57"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "474fbaf0253a42bb733b8ebbcae5eb9f589438c312255f5e0451cb76238c45fa99603ff33863d7aee2381a8e7c94484861ff9912fff5bd9281591bc3b9d1770fead1b26b68771114c84c38f0861bbc900479414a129c52f1f894bd30951c72f4b1b4a58b9ec6abb4717dd1a56f0db6c1e2390c1f416fc758413ae9d05ca772c9d41b435315f5d379fa3d85bd270a890479ff3b183a63cdb79396892431e14f76dc47e0bf673f1103912117409e22cba3e69c3e5d01279862c5"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "5ab2b51262cbe6861c7bf46f1332152122050616d1a5b9f70a0fb9e8fa29fa8f4b78e4e4e6aafa4580dd00c562b9f0804469d828598ba36f3c19c019fe347462fd016a14fb727d36e3"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "3c2df14a6ea8dda34911c554fd5c8c4296bfb1ebdbcc78ea06e578ed3ea618b3e4cef363cb8640511a06371dd8515fa40aca2419af46b8f29f7a50e4af9edb468719cb8c801f0dc17c6b4254615acad28a036bb3e14eba730d8e0e961815d81f30b6064267037f06670558e4911588cdc9"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "6f5988b78f"}, @INET_DIAG_REQ_BYTECODE={0xb4d, 0x1, "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"}]}, 0xec4}}, 0x0) 11:21:29 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000056c0), 0x0, 0x0) readv(r0, 0x0, 0x0) 11:21:29 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x5410, &(0x7f0000000440)) 11:21:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 11:21:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2b, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@ceph_nfs_snapfh={0x1c}, 0x0, 0x3) 11:21:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='($\x18\xe5=\x11c\x86g\x02\x00\x00\x00?\x00\x00\x00\a\x00\x00\x00S\xc8\xe8*\xcc\xff\x7f\xcb\x9e@G\x96\x1e>\xdb\xa1J\xab\xd0\xb7.k^mq\xc2\xc4Q{\x14J\xb3i\x82\xa18\xf6\x04\x7f\x14RT?\xd2\x01J\xf5E\xc1\xf8\x1f\x80(\x9b?\xb6\xac_l\x17\xd1\f \xbf\xb8\xf8\xfc\xb5\xf8\xf4\x0e\xc3\xd6\xdf\xa3 \x00\x00\x00\n>\xdfm\f\xd5\xc4?\x04\x00\x00\x00\x00\x00\x00\x00\xd6j\xe7\x00-Y\x99\x03\xdf\xcc(\xa7t\xf4)\xf5\xf9s8@U\xca$Jd\xf3G\xcd\xfdAno\xc7\b\x92\xa7\x18\xf09@\x10\xb3\xe4\xdd\x14\xbfoO', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000000007f}) 11:21:29 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f00000001c0)={0xec4, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "8f95233490371128c9f024b57820c555638c49572452560371ae64a4de0e1fa6f85c03816d156032742ef5ae866e8268f638153dc462a2861a0cbe290bbe19e88c638ca06facda4a46baf5dd365a496e9ae8d5d536993276a0a33d2a7928c8a7198b0294ac761b1ad3b84a6db36f922368a237ce1c8e5bbc165ca8cb8b06af50fb601e213420f6cd63379c48182018a7fcacb41f0964db3f0e4185892968ceb1688115f9506682f9652a7f0261b7c93cd452f688873e2207d20be61a65da17a2872b06ce86892b0f1ced85112311b9608ce1da197c763035073c468a6494c10bb7e3d3b6fcc7d1185c9f9a20713c77ed0231abffe60ff2aa90"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "a5e48f6f48877dd2051abbb641e079a88c7e208d11d4d4a7e7cab4d9d52a83e41dd735cb976112d431c228a6641f5b23aa5cba3dfb11b95ca6062c3dcc472c753270ff7e1c5dc160e013268a8ce6d03a83fa03f85914e2605985f4a2a6827091d6d7a38bdac9803f089bdb9e8880fd43f5a4904dd03ae279d31c200746e1abdc39d2d1dbe2f4abeaf0b3644e57"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "474fbaf0253a42bb733b8ebbcae5eb9f589438c312255f5e0451cb76238c45fa99603ff33863d7aee2381a8e7c94484861ff9912fff5bd9281591bc3b9d1770fead1b26b68771114c84c38f0861bbc900479414a129c52f1f894bd30951c72f4b1b4a58b9ec6abb4717dd1a56f0db6c1e2390c1f416fc758413ae9d05ca772c9d41b435315f5d379fa3d85bd270a890479ff3b183a63cdb79396892431e14f76dc47e0bf673f1103912117409e22cba3e69c3e5d01279862c5"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "5ab2b51262cbe6861c7bf46f1332152122050616d1a5b9f70a0fb9e8fa29fa8f4b78e4e4e6aafa4580dd00c562b9f0804469d828598ba36f3c19c019fe347462fd016a14fb727d36e3"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "3c2df14a6ea8dda34911c554fd5c8c4296bfb1ebdbcc78ea06e578ed3ea618b3e4cef363cb8640511a06371dd8515fa40aca2419af46b8f29f7a50e4af9edb468719cb8c801f0dc17c6b4254615acad28a036bb3e14eba730d8e0e961815d81f30b6064267037f06670558e4911588cdc9"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "6f5988b78f"}, @INET_DIAG_REQ_BYTECODE={0xb4d, 0x1, "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"}]}, 0xec4}}, 0x0) 11:21:29 executing program 0: pwritev2(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000140)="1b", 0x1}, {&(0x7f0000000180)}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) syz_read_part_table(0x0, 0x65021, &(0x7f0000000180)=[{&(0x7f0000000080)="82", 0x1}]) 11:21:29 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) 11:21:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 11:21:29 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x5410, &(0x7f0000000440)) 11:21:29 executing program 3: prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) 11:21:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='($\x18\xe5=\x11c\x86g\x02\x00\x00\x00?\x00\x00\x00\a\x00\x00\x00S\xc8\xe8*\xcc\xff\x7f\xcb\x9e@G\x96\x1e>\xdb\xa1J\xab\xd0\xb7.k^mq\xc2\xc4Q{\x14J\xb3i\x82\xa18\xf6\x04\x7f\x14RT?\xd2\x01J\xf5E\xc1\xf8\x1f\x80(\x9b?\xb6\xac_l\x17\xd1\f \xbf\xb8\xf8\xfc\xb5\xf8\xf4\x0e\xc3\xd6\xdf\xa3 \x00\x00\x00\n>\xdfm\f\xd5\xc4?\x04\x00\x00\x00\x00\x00\x00\x00\xd6j\xe7\x00-Y\x99\x03\xdf\xcc(\xa7t\xf4)\xf5\xf9s8@U\xca$Jd\xf3G\xcd\xfdAno\xc7\b\x92\xa7\x18\xf09@\x10\xb3\xe4\xdd\x14\xbfoO', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000000007f}) 11:21:29 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) sched_setattr(r0, &(0x7f0000000980)={0x38}, 0x0) 11:21:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000014c0)) 11:21:29 executing program 3: prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) 11:21:29 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x5410, &(0x7f0000000440)) [ 129.068518] capability: warning: `syz-executor.7' uses deprecated v2 capabilities in a way that may be insecure 11:21:29 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 11:21:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2801000017000100000000000000000000000000000000000000ffffac1414bb0000000000000000fc020000000000000000000000000000ac141400000000000000000000000000fe88000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000001000000000000ffffffff00000000000000003c94723a2f05cd5b000000000000000000000000f0adc42ba5530f5497e794aac7907d1932e25e90820ceaa5cb752f16f7318ffa39f231cd885c27b37814d5be1cdd8d6ca2bf86bfa766917f031ae8179ab64bc26aed7a3730e2a3a8d1347419bcaddb933733ce1bec335f905b1893195035b78783f57375e6b6e8b938662e3b1415f9cc25ab9f41"], 0x128}}, 0x0) 11:21:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 11:21:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) r0 = getpid() pidfd_open(r0, 0x0) pipe2(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x4}, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000580)={0x20}, 0x0, 0x0) 11:21:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='($\x18\xe5=\x11c\x86g\x02\x00\x00\x00?\x00\x00\x00\a\x00\x00\x00S\xc8\xe8*\xcc\xff\x7f\xcb\x9e@G\x96\x1e>\xdb\xa1J\xab\xd0\xb7.k^mq\xc2\xc4Q{\x14J\xb3i\x82\xa18\xf6\x04\x7f\x14RT?\xd2\x01J\xf5E\xc1\xf8\x1f\x80(\x9b?\xb6\xac_l\x17\xd1\f \xbf\xb8\xf8\xfc\xb5\xf8\xf4\x0e\xc3\xd6\xdf\xa3 \x00\x00\x00\n>\xdfm\f\xd5\xc4?\x04\x00\x00\x00\x00\x00\x00\x00\xd6j\xe7\x00-Y\x99\x03\xdf\xcc(\xa7t\xf4)\xf5\xf9s8@U\xca$Jd\xf3G\xcd\xfdAno\xc7\b\x92\xa7\x18\xf09@\x10\xb3\xe4\xdd\x14\xbfoO', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000000007f}) 11:21:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2801000017000100000000000000000000000000000000000000ffffac1414bb0000000000000000fc020000000000000000000000000000ac141400000000000000000000000000fe88000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000001000000000000ffffffff00000000000000003c94723a2f05cd5b000000000000000000000000f0adc42ba5530f5497e794aac7907d1932e25e90820ceaa5cb752f16f7318ffa39f231cd885c27b37814d5be1cdd8d6ca2bf86bfa766917f031ae8179ab64bc26aed7a3730e2a3a8d1347419bcaddb933733ce1bec335f905b1893195035b78783f57375e6b6e8b938662e3b1415f9cc25ab9f41"], 0x128}}, 0x0) 11:21:30 executing program 3: prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) 11:21:30 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='F', 0x1}], 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:21:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) r0 = getpid() pidfd_open(r0, 0x0) pipe2(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x4}, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000580)={0x20}, 0x0, 0x0) 11:21:30 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 11:21:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='($\x18\xe5=\x11c\x86g\x02\x00\x00\x00?\x00\x00\x00\a\x00\x00\x00S\xc8\xe8*\xcc\xff\x7f\xcb\x9e@G\x96\x1e>\xdb\xa1J\xab\xd0\xb7.k^mq\xc2\xc4Q{\x14J\xb3i\x82\xa18\xf6\x04\x7f\x14RT?\xd2\x01J\xf5E\xc1\xf8\x1f\x80(\x9b?\xb6\xac_l\x17\xd1\f \xbf\xb8\xf8\xfc\xb5\xf8\xf4\x0e\xc3\xd6\xdf\xa3 \x00\x00\x00\n>\xdfm\f\xd5\xc4?\x04\x00\x00\x00\x00\x00\x00\x00\xd6j\xe7\x00-Y\x99\x03\xdf\xcc(\xa7t\xf4)\xf5\xf9s8@U\xca$Jd\xf3G\xcd\xfdAno\xc7\b\x92\xa7\x18\xf09@\x10\xb3\xe4\xdd\x14\xbfoO', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000000007f}) 11:21:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2801000017000100000000000000000000000000000000000000ffffac1414bb0000000000000000fc020000000000000000000000000000ac141400000000000000000000000000fe88000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000001000000000000ffffffff00000000000000003c94723a2f05cd5b000000000000000000000000f0adc42ba5530f5497e794aac7907d1932e25e90820ceaa5cb752f16f7318ffa39f231cd885c27b37814d5be1cdd8d6ca2bf86bfa766917f031ae8179ab64bc26aed7a3730e2a3a8d1347419bcaddb933733ce1bec335f905b1893195035b78783f57375e6b6e8b938662e3b1415f9cc25ab9f41"], 0x128}}, 0x0) 11:21:30 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @rand_addr=0xe0000016, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 11:21:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2']) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 11:21:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2801000017000100000000000000000000000000000000000000ffffac1414bb0000000000000000fc020000000000000000000000000000ac141400000000000000000000000000fe88000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000001000000000000ffffffff00000000000000003c94723a2f05cd5b000000000000000000000000f0adc42ba5530f5497e794aac7907d1932e25e90820ceaa5cb752f16f7318ffa39f231cd885c27b37814d5be1cdd8d6ca2bf86bfa766917f031ae8179ab64bc26aed7a3730e2a3a8d1347419bcaddb933733ce1bec335f905b1893195035b78783f57375e6b6e8b938662e3b1415f9cc25ab9f41"], 0x128}}, 0x0) 11:21:30 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 11:21:30 executing program 3: prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) 11:21:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) r0 = getpid() pidfd_open(r0, 0x0) pipe2(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x4}, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000580)={0x20}, 0x0, 0x0) 11:21:30 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = inotify_init() poll(&(0x7f0000000080)=[{r0}, {r0}, {r0}, {r1}, {r0}, {r2}], 0x6, 0x1) [ 129.912687] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.916177] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 11:21:30 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)) 11:21:30 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = fcntl$dupfd(r1, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x16, &(0x7f0000001480)=[{0x0}, {0x0}], 0x2) 11:21:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@generic="80", @nested={0x5, 0x0, 0x0, 0x1, [@generic="9b"]}]}, 0x1c}], 0x1}, 0x0) 11:21:30 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) [ 129.988047] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.988921] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 11:21:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)={0x0, 0x1e, '\x00', [@generic={0x8, 0xd4, "e6150e99102b6e28f7858de4b7b9a9a0bebcef6d26958da8b9071f3d2f8d37b9705d0be9e8d07307ee5668b3ae21f15ff542cef754cb8080d6c337b0b00b79f0ae7ddee046c45f7669f24eaf323d9d114132dc47c93b1d5a2eb34104f4dafd10d5215795e2a0cc8d1f7f14a543caa3fac8d90f88653800ae1b1fe9c20067aa07bb923067db4db6bb7838b5a916a45efc087b763005f1ba10b66c120b55525c9122ab609c4db7df35d62622c8d7a64dcaae101ac061f7e556c3642f5ce24251fe5e9a1ce009e1f7bc667e0e4cafe75509c7009159"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}, 0xf8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 11:21:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) r0 = getpid() pidfd_open(r0, 0x0) pipe2(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x4}, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000580)={0x20}, 0x0, 0x0) 11:21:30 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2']) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 11:21:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2']) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 11:21:30 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000b80)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}) 11:21:30 executing program 3: ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x3}) 11:21:30 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(0x0, 0x8) [ 130.160042] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.161178] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 11:21:30 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) lseek(r0, 0x0, 0x1) 11:21:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)={0x0, 0x1e, '\x00', [@generic={0x8, 0xd4, "e6150e99102b6e28f7858de4b7b9a9a0bebcef6d26958da8b9071f3d2f8d37b9705d0be9e8d07307ee5668b3ae21f15ff542cef754cb8080d6c337b0b00b79f0ae7ddee046c45f7669f24eaf323d9d114132dc47c93b1d5a2eb34104f4dafd10d5215795e2a0cc8d1f7f14a543caa3fac8d90f88653800ae1b1fe9c20067aa07bb923067db4db6bb7838b5a916a45efc087b763005f1ba10b66c120b55525c9122ab609c4db7df35d62622c8d7a64dcaae101ac061f7e556c3642f5ce24251fe5e9a1ce009e1f7bc667e0e4cafe75509c7009159"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}, 0xf8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 130.212832] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.216516] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32 11:21:30 executing program 2: pipe(&(0x7f0000000380)) getresuid(&(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)) 11:21:31 executing program 3: syz_io_uring_setup(0x6894, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x59c8, &(0x7f0000000140)={0x0, 0xba5e, 0x12, 0x0, 0x151}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000300)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="14b88c40ffe128a46ddc3dee731efcaddaa4de25e1cc0ab7d182fb5c40076f801e32bd7c97b56212b5a5edf2b0dc13d8b28c0ff9213e42780281a1fe4d45268148b37d62856ff122c029d0011eb29e19863176ee30178fc19c23b04116b2c99fe7c7136a64071636c32820d6fdd7bcbfdcfb61fbff3450118dcbc9d0ccd9d097f2f276b729583c3a6d657510859334542090fa8d85e8880f28e91d49c49bb67fee67a7540ae1d127086bf9bd3c6eec", 0xaf}, {0x0}, {&(0x7f0000000580)="0a5177a352de5a52f78a2aa96c61c2bafccd065365de87d25c48e65667340df503728d98f234a2caadcfcd83ef67ef103f9cd140d59a8268fb4391870826a79091e4b8508e9a1f88c047b1fe1f03fa2b167426b89ec2c07dcfc14c7ef2132676370bd012278689af8f4c5bad78370367ef078c6374d0a6fc7a81e68f650343eb831f5fcb47a64ecf32ef220596e732975b970d298c1f62bc8e188ba8cec0f9012042198813033524982b190f2822662f26904e24daa8665ed9c9e45f05e3c9d9", 0xc0}, {0x0}], 0x4, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xe529}}], 0x78}, 0x8050) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 11:21:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4) 11:21:31 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2']) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 11:21:31 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(0x0, 0x8) 11:21:31 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) 11:21:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000001180)=@can, 0x80, 0x0}}], 0x1, 0x24002840) 11:21:31 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) 11:21:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)={0x0, 0x1e, '\x00', [@generic={0x8, 0xd4, "e6150e99102b6e28f7858de4b7b9a9a0bebcef6d26958da8b9071f3d2f8d37b9705d0be9e8d07307ee5668b3ae21f15ff542cef754cb8080d6c337b0b00b79f0ae7ddee046c45f7669f24eaf323d9d114132dc47c93b1d5a2eb34104f4dafd10d5215795e2a0cc8d1f7f14a543caa3fac8d90f88653800ae1b1fe9c20067aa07bb923067db4db6bb7838b5a916a45efc087b763005f1ba10b66c120b55525c9122ab609c4db7df35d62622c8d7a64dcaae101ac061f7e556c3642f5ce24251fe5e9a1ce009e1f7bc667e0e4cafe75509c7009159"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}, 0xf8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 11:21:31 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2']) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 11:21:31 executing program 4: timer_create(0x2, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, r0+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) [ 130.466608] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.468819] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32 [ 130.478911] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.480846] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 11:21:31 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(0x0, 0x8) 11:21:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000001180)=@can, 0x80, 0x0}}], 0x1, 0x24002840) 11:21:31 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) 11:21:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)={0x0, 0x1e, '\x00', [@generic={0x8, 0xd4, "e6150e99102b6e28f7858de4b7b9a9a0bebcef6d26958da8b9071f3d2f8d37b9705d0be9e8d07307ee5668b3ae21f15ff542cef754cb8080d6c337b0b00b79f0ae7ddee046c45f7669f24eaf323d9d114132dc47c93b1d5a2eb34104f4dafd10d5215795e2a0cc8d1f7f14a543caa3fac8d90f88653800ae1b1fe9c20067aa07bb923067db4db6bb7838b5a916a45efc087b763005f1ba10b66c120b55525c9122ab609c4db7df35d62622c8d7a64dcaae101ac061f7e556c3642f5ce24251fe5e9a1ce009e1f7bc667e0e4cafe75509c7009159"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}, 0xf8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 130.540372] kmemleak: Found object by alias at 0x607f1a63e7d0 [ 130.540394] CPU: 0 UID: 0 PID: 4337 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 130.540412] Tainted: [W]=WARN [ 130.540416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.540424] Call Trace: [ 130.540428] [ 130.540433] dump_stack_lvl+0xca/0x120 [ 130.540460] __lookup_object+0x94/0xb0 [ 130.540478] delete_object_full+0x27/0x70 [ 130.540495] free_percpu+0x30/0x1160 [ 130.540512] ? arch_uprobe_clear_state+0x16/0x140 [ 130.540534] futex_hash_free+0x38/0xc0 [ 130.540549] mmput+0x2d3/0x390 [ 130.540568] do_exit+0x79d/0x2970 [ 130.540582] ? lock_release+0xc8/0x290 [ 130.540600] ? __pfx_do_exit+0x10/0x10 [ 130.540614] ? find_held_lock+0x2b/0x80 [ 130.540632] ? get_signal+0x835/0x2340 [ 130.540657] do_group_exit+0xd3/0x2a0 [ 130.540673] get_signal+0x2315/0x2340 [ 130.540696] ? __pfx_get_signal+0x10/0x10 [ 130.540712] ? do_futex+0x135/0x370 [ 130.540726] ? __pfx_do_futex+0x10/0x10 [ 130.540738] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 130.540754] arch_do_signal_or_restart+0x80/0x790 [ 130.540773] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 130.540790] ? __x64_sys_futex+0x1c9/0x4d0 [ 130.540802] ? __x64_sys_futex+0x1d2/0x4d0 [ 130.540817] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.540830] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.540844] ? __pfx___x64_sys_mount+0x10/0x10 [ 130.540862] exit_to_user_mode_loop+0x8b/0x110 [ 130.540876] do_syscall_64+0x2f7/0x360 [ 130.540889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.540902] RIP: 0033:0x7ff9231a4b19 [ 130.540911] Code: Unable to access opcode bytes at 0x7ff9231a4aef. [ 130.540916] RSP: 002b:00007ff92071a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.540928] RAX: 0000000000000000 RBX: 00007ff9232b7f68 RCX: 00007ff9231a4b19 [ 130.540936] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9232b7f68 [ 130.540943] RBP: 00007ff9232b7f60 R08: 0000000000000000 R09: 0000000000000000 [ 130.540950] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9232b7f6c [ 130.540957] R13: 00007ffdb64ccecf R14: 00007ff92071a300 R15: 0000000000022000 [ 130.540972] [ 130.540976] kmemleak: Object (percpu) 0x607f1a63e7cc (size 8): [ 130.540983] kmemleak: comm "syz-executor.3", pid 4337, jiffies 4294797265 [ 130.540990] kmemleak: min_count = 1 [ 130.540994] kmemleak: count = 0 [ 130.540998] kmemleak: flags = 0x21 [ 130.541002] kmemleak: checksum = 0 [ 130.541005] kmemleak: backtrace: [ 130.541009] pcpu_alloc_noprof+0x87a/0x1170 [ 130.541025] alloc_vfsmnt+0x135/0x6e0 [ 130.541039] vfs_create_mount.part.0+0x40/0x440 [ 130.541055] path_mount+0x1637/0x1dd0 [ 130.541066] __x64_sys_mount+0x27b/0x300 [ 130.541078] do_syscall_64+0xbf/0x360 [ 130.541087] entry_SYSCALL_64_after_hwframe+0x77/0x7f 11:21:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 11:21:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_alloc(0x0, 0x0) 11:21:31 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(0x0, 0x8) 11:21:31 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2']) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 11:21:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 130.783574] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.784536] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32 11:21:31 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) 11:21:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000001180)=@can, 0x80, 0x0}}], 0x1, 0x24002840) 11:21:31 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2']) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 11:21:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') write$P9_RCLUNK(r0, 0x0, 0x0) 11:21:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 11:21:31 executing program 3: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 11:21:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000001180)=@can, 0x80, 0x0}}], 0x1, 0x24002840) [ 131.003750] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 11:21:31 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) [ 131.011065] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 11:21:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 11:21:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) read(r0, &(0x7f0000000380)=""/235, 0xeb) 11:21:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') write$P9_RCLUNK(r0, 0x0, 0x0) 11:21:31 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') write$P9_RCLUNK(r0, 0x0, 0x0) 11:21:31 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 11:21:31 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x8000000}, "", ['\x00']}, 0x120) 11:21:31 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) utimes(0x0, 0x0) 11:21:31 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xcc41, 0x8) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000003500), 0xe04772030e62e2d9, 0x0) 11:21:31 executing program 4: r0 = getpid() getpriority(0x2, r0) 11:21:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000b40), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) [ 131.312235] sg_write: data in/out 134217692/246 bytes for SCSI command 0x0-- guessing data in; [ 131.312235] program syz-executor.0 not setting count and/or reply_len properly 11:21:32 executing program 4: r0 = getpid() getpriority(0x2, r0) [ 131.385044] sg_write: data in/out 134217692/246 bytes for SCSI command 0x0-- guessing data in; [ 131.385044] program syz-executor.0 not setting count and/or reply_len properly 11:21:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') write$P9_RCLUNK(r0, 0x0, 0x0) 11:21:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) 11:21:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) 11:21:32 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') write$P9_RCLUNK(r0, 0x0, 0x0) 11:21:32 executing program 4: r0 = getpid() getpriority(0x2, r0) 11:21:32 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@dstopts={0x0, 0x1d, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @generic={0x0, 0xd3, "30832a9b98338fb0bc7d9dd052bf7ad6c24d8629be368ce12b6f53059e3e323103f91cf76cb8d8963a41b4c9b5baf4359458c4dc011ef9af1fe24333295a2807617f649ccc98fb70b2e44d17457b9c3ac5133d84fe740aebe120e0bf62fac244cd911bf3b05b991423829e59453d5ffcbe250721430204b04cf59a510389a6adadfc866a547df29291103f9a7d9226db096ee0da1baf88fae69da48f211e0f907588c5de173fa9c3e341a9c69d229ba44595a95ed49be08f38ea8c573d0aa8ab36313a9c2800235cfb1f89583142dc2fad4cf1"}]}, 0xf0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 11:21:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084504, 0x0) 11:21:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f000000a240)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000080)="06", 0x1}], 0x1, &(0x7f000000a440)=ANY=[@ANYBLOB="c80000000000000029000000370000002e15000000000000071800000002041ff8ff0500000000000000ac04000000000000072800000002080002000700000000000000020000000000000076000000000000000500000000000000c204000001ff0730000000020a08d7020002000000000000ab6dae1d00000000060000000000000001000000000000000009000000000000c910ff010000000000000000000000000001040105c20400000800c9100000000000000000000000000000000000000000000000300100"], 0x1f8}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000002a40)="fe", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 11:21:32 executing program 4: r0 = getpid() getpriority(0x2, r0) 11:21:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f000000a240)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000080)="06", 0x1}], 0x1, &(0x7f000000a440)=ANY=[@ANYBLOB="c80000000000000029000000370000002e15000000000000071800000002041ff8ff0500000000000000ac04000000000000072800000002080002000700000000000000020000000000000076000000000000000500000000000000c204000001ff0730000000020a08d7020002000000000000ab6dae1d00000000060000000000000001000000000000000009000000000000c910ff010000000000000000000000000001040105c20400000800c9100000000000000000000000000000000000000000000000300100"], 0x1f8}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000002a40)="fe", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 11:21:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) 11:21:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) 11:21:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) 11:21:32 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') write$P9_RCLUNK(r0, 0x0, 0x0) 11:21:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') write$P9_RCLUNK(r0, 0x0, 0x0) 11:21:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084504, 0x0) 11:21:32 executing program 7: r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x5c8a, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f9ef228853802bdb858bff046848ec6b1fd74b8ca5173303669c19f29e0c1c37a1ecb808", 0x24, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) 11:21:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f000000a240)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000080)="06", 0x1}], 0x1, &(0x7f000000a440)=ANY=[@ANYBLOB="c80000000000000029000000370000002e15000000000000071800000002041ff8ff0500000000000000ac04000000000000072800000002080002000700000000000000020000000000000076000000000000000500000000000000c204000001ff0730000000020a08d7020002000000000000ab6dae1d00000000060000000000000001000000000000000009000000000000c910ff010000000000000000000000000001040105c20400000800c9100000000000000000000000000000000000000000000000300100"], 0x1f8}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000002a40)="fe", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 11:21:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) 11:21:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) 11:21:32 executing program 7: r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x5c8a, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f9ef228853802bdb858bff046848ec6b1fd74b8ca5173303669c19f29e0c1c37a1ecb808", 0x24, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) 11:21:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084504, 0x0) 11:21:32 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 11:21:32 executing program 1: r0 = getpid() syz_open_procfs$namespace(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11:21:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) 11:21:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f000000a240)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000080)="06", 0x1}], 0x1, &(0x7f000000a440)=ANY=[@ANYBLOB="c80000000000000029000000370000002e15000000000000071800000002041ff8ff0500000000000000ac04000000000000072800000002080002000700000000000000020000000000000076000000000000000500000000000000c204000001ff0730000000020a08d7020002000000000000ab6dae1d00000000060000000000000001000000000000000009000000000000c910ff010000000000000000000000000001040105c20400000800c9100000000000000000000000000000000000000000000000300100"], 0x1f8}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000002a40)="fe", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 11:21:32 executing program 7: r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x5c8a, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f9ef228853802bdb858bff046848ec6b1fd74b8ca5173303669c19f29e0c1c37a1ecb808", 0x24, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) 11:21:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) 11:21:32 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}]}}) 11:21:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084504, 0x0) 11:21:32 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x1480000) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x400000, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8001) 11:21:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) 11:21:32 executing program 7: r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x5c8a, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f9ef228853802bdb858bff046848ec6b1fd74b8ca5173303669c19f29e0c1c37a1ecb808", 0x24, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) 11:21:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) 11:21:32 executing program 5: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 11:21:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0xc2a83) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup2(r1, r0) 11:21:32 executing program 1: r0 = getpid() syz_open_procfs$namespace(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11:21:32 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}]}}) 11:21:32 executing program 5: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0) 11:21:32 executing program 1: r0 = getpid() syz_open_procfs$namespace(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11:21:32 executing program 7: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x7) ftruncate(r0, 0x8800000) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1, 0xfffffffa, 0x0) 11:21:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1b) 11:21:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 11:21:32 executing program 7: shmget$private(0x0, 0x14000, 0x800, &(0x7f0000fec000/0x14000)=nil) 11:21:32 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x4000) sendfile(r0, r1, 0x0, 0x68e146a1) 11:21:32 executing program 2: timerfd_create(0x7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000100)=""/147, 0x93, 0x0) 11:21:32 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}]}}) 11:21:33 executing program 1: r0 = getpid() syz_open_procfs$namespace(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11:21:33 executing program 0: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0x3, r0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/116, 0x74) 11:21:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:21:33 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x6880, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$CDROM_DISC_STATUS(r1, 0x5327) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f00000000c0)={@lba, 0x2, 0x1a, &(0x7f0000000080)=""/26}) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f0000000100)) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000140)) 11:21:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 11:21:33 executing program 3: get_mempolicy(0x0, &(0x7f0000000680), 0x3ff, &(0x7f0000ff9000/0x4000)=nil, 0x2) 11:21:33 executing program 2: timerfd_create(0x7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000100)=""/147, 0x93, 0x0) 11:21:33 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}]}}) 11:21:33 executing program 0: r0 = syz_io_uring_setup(0x56a8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11, &(0x7f0000000580)=[{0x0}], 0x1) 11:21:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 11:21:33 executing program 3: timerfd_create(0x8, 0x80800) 11:21:33 executing program 2: timerfd_create(0x7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000100)=""/147, 0x93, 0x0) 11:21:33 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "2c7af9", 0x0, 0x2c, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, [@srh]}}}}}}}, 0x0) 11:21:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) syz_genetlink_get_family_id$tipc(&(0x7f0000001dc0), r0) 11:21:33 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) signalfd(r0, &(0x7f0000000240), 0x8) 11:21:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 11:21:33 executing program 2: timerfd_create(0x7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000100)=""/147, 0x93, 0x0) 11:21:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2e, 0x0, &(0x7f0000000100)) 11:21:33 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = dup2(r0, r0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x100003c) inotify_rm_watch(r2, r3) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200) 11:21:33 executing program 6: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="19c841e1d14cb881ceb01ac8ddd761c9faa1c9d2e19cecd35ec21461da67a620045204f05f52fd", 0x27}], 0x3089012, &(0x7f0000000440)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f80), 0xffffffffffffffff) 11:21:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 11:21:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) 11:21:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) 11:21:33 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x30, 0xf]}}}}]}) 11:21:33 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(r0, &(0x7f0000000000)={{0x108}}, 0x20) [ 132.739812] tmpfs: Bad value for 'mpol' [ 132.743080] tmpfs: Bad value for 'mpol' [ 132.788992] audit: type=1400 audit(1756725693.560:10): avc: denied { watch_reads } for pid=4578 comm="syz-executor.5" path="/syzkaller-testdir100202680/syzkaller.nNptxv/39/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1 11:21:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2e, 0x0, &(0x7f0000000100)) [ 132.800579] kmemleak: Found object by alias at 0x607f1a63e7d0 [ 132.800600] CPU: 1 UID: 0 PID: 4569 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 132.800629] Tainted: [W]=WARN [ 132.800634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 132.800643] Call Trace: [ 132.800648] [ 132.800654] dump_stack_lvl+0xca/0x120 [ 132.800688] __lookup_object+0x94/0xb0 [ 132.800711] delete_object_full+0x27/0x70 [ 132.800732] free_percpu+0x30/0x1160 [ 132.800755] ? arch_uprobe_clear_state+0x16/0x140 [ 132.800781] futex_hash_free+0x38/0xc0 [ 132.800800] mmput+0x2d3/0x390 [ 132.800826] do_exit+0x79d/0x2970 [ 132.800844] ? lock_release+0xc8/0x290 [ 132.800866] ? __pfx_do_exit+0x10/0x10 [ 132.800885] ? find_held_lock+0x2b/0x80 [ 132.800909] ? get_signal+0x835/0x2340 [ 132.800935] do_group_exit+0xd3/0x2a0 [ 132.800956] get_signal+0x2315/0x2340 [ 132.800979] ? __virt_addr_valid+0x2e8/0x5d0 [ 132.801009] ? __pfx_get_signal+0x10/0x10 [ 132.801032] ? do_futex+0x135/0x370 [ 132.801050] ? __pfx_do_futex+0x10/0x10 [ 132.801066] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 132.801086] arch_do_signal_or_restart+0x80/0x790 [ 132.801109] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 132.801131] ? __x64_sys_futex+0x1c9/0x4d0 [ 132.801148] ? __x64_sys_futex+0x1d2/0x4d0 [ 132.801168] ? __pfx___x64_sys_futex+0x10/0x10 [ 132.801193] exit_to_user_mode_loop+0x8b/0x110 [ 132.801211] do_syscall_64+0x2f7/0x360 [ 132.801228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.801244] RIP: 0033:0x7ff9231a4b19 [ 132.801256] Code: Unable to access opcode bytes at 0x7ff9231a4aef. [ 132.801262] RSP: 002b:00007ff92071a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.801277] RAX: fffffffffffffe00 RBX: 00007ff9232b7f68 RCX: 00007ff9231a4b19 [ 132.801288] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9232b7f68 [ 132.801297] RBP: 00007ff9232b7f60 R08: 0000000000000000 R09: 0000000000000000 [ 132.801306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9232b7f6c [ 132.801315] R13: 00007ffdb64ccecf R14: 00007ff92071a300 R15: 0000000000022000 [ 132.801336] [ 132.801341] kmemleak: Object (percpu) 0x607f1a63e7cc (size 8): [ 132.801350] kmemleak: comm "syz-executor.5", pid 4580, jiffies 4294799592 [ 132.801359] kmemleak: min_count = 1 [ 132.801364] kmemleak: count = 0 [ 132.801369] kmemleak: flags = 0x21 [ 132.801374] kmemleak: checksum = 0 [ 132.801379] kmemleak: backtrace: [ 132.801384] pcpu_alloc_noprof+0x87a/0x1170 [ 132.801405] alloc_vfsmnt+0x135/0x6e0 [ 132.801423] vfs_create_mount.part.0+0x40/0x440 [ 132.801443] path_mount+0x1637/0x1dd0 [ 132.801458] __x64_sys_mount+0x27b/0x300 [ 132.801474] do_syscall_64+0xbf/0x360 [ 132.801486] entry_SYSCALL_64_after_hwframe+0x77/0x7f 11:21:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) 11:21:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) stat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)) [ 132.900857] Zero length message leads to an empty skb 11:21:33 executing program 7: rseq(0x0, 0xfffffffffffffd88, 0x2000000002, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) write$char_usb(0xffffffffffffffff, &(0x7f00000000c0)="d22480cb27b71b8a44c2a173f3c59adca8e2e5252524886ff022a51a589eaafdd7f2a26b2d64", 0x26) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40086607, 0x0) 11:21:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2e, 0x0, &(0x7f0000000100)) 11:21:33 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:21:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:21:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) 11:21:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) lseek(r0, 0xfffffffffffffffd, 0x4) 11:21:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x43, 0x0, "bb55a6bb5c9dffca8cf499cff40e5b469829a823a0d41dfde8aa233876e6850eb92bee3018529d133bd5a70815fc969b93338ddf45f54ac0e7b953ad4ae549b18d76a379a6555b8822ea73fc3e6f3437"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x24, 0x0, "972b15b73e0fa0b11d990520768dccf0afcac51c84604096d8a0a9c7de9a927f16c63ab3c57df29b46a8d76bf27a287a7aa5d1824af95d22d722023105514d8e6969ff8af38edf0f0947f5db00971323"}, 0xd8) 11:21:33 executing program 6: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="19c841e1d14cb881ceb01ac8ddd761c9faa1c9d2e19cecd35ec21461da67a620045204f05f52fd", 0x27}], 0x3089012, &(0x7f0000000440)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f80), 0xffffffffffffffff) [ 133.058297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:33 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000002940)='sockfs\x00', 0x0) 11:21:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11:21:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2e, 0x0, &(0x7f0000000100)) [ 133.083051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) 11:21:33 executing program 6: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="19c841e1d14cb881ceb01ac8ddd761c9faa1c9d2e19cecd35ec21461da67a620045204f05f52fd", 0x27}], 0x3089012, &(0x7f0000000440)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f80), 0xffffffffffffffff) 11:21:33 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 11:21:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a09", 0x78, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {0x0, 0x0, 0x8c00}], 0x0, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@usrjquota}]}) 11:21:34 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 11:21:34 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) [ 133.311537] loop5: detected capacity change from 0 to 140 [ 133.339982] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz-executor.5: iget: checksum invalid [ 133.344117] EXT4-fs (loop5): get root inode failed [ 133.344537] EXT4-fs (loop5): mount failed [ 133.376496] loop5: detected capacity change from 0 to 140 [ 133.393066] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz-executor.5: iget: checksum invalid [ 133.402851] EXT4-fs (loop5): get root inode failed [ 133.403439] EXT4-fs (loop5): mount failed [ 133.407630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:34 executing program 6: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="19c841e1d14cb881ceb01ac8ddd761c9faa1c9d2e19cecd35ec21461da67a620045204f05f52fd", 0x27}], 0x3089012, &(0x7f0000000440)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f80), 0xffffffffffffffff) 11:21:34 executing program 2: prctl$PR_SET_IO_FLUSHER(0x4d, 0x8) 11:21:34 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1) unshare(0x0) 11:21:34 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 11:21:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 11:21:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a09", 0x78, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {0x0, 0x0, 0x8c00}], 0x0, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@usrjquota}]}) 11:21:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:21:34 executing program 7: rseq(0x0, 0xfffffffffffffd88, 0x2000000002, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) write$char_usb(0xffffffffffffffff, &(0x7f00000000c0)="d22480cb27b71b8a44c2a173f3c59adca8e2e5252524886ff022a51a589eaafdd7f2a26b2d64", 0x26) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40086607, 0x0) 11:21:34 executing program 2: prctl$PR_SET_IO_FLUSHER(0x4d, 0x8) [ 134.031441] loop5: detected capacity change from 0 to 140 [ 134.068756] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz-executor.5: iget: checksum invalid [ 134.069872] EXT4-fs (loop5): get root inode failed [ 134.070248] EXT4-fs (loop5): mount failed [ 134.071341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.088576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.106803] kmemleak: Found object by alias at 0x607f1a63e7d0 [ 134.106821] CPU: 0 UID: 0 PID: 4640 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 134.106841] Tainted: [W]=WARN [ 134.106844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 134.106852] Call Trace: [ 134.106856] [ 134.106861] dump_stack_lvl+0xca/0x120 [ 134.106888] __lookup_object+0x94/0xb0 [ 134.106906] delete_object_full+0x27/0x70 [ 134.106923] free_percpu+0x30/0x1160 [ 134.106940] ? arch_uprobe_clear_state+0x16/0x140 [ 134.106961] futex_hash_free+0x38/0xc0 [ 134.106976] mmput+0x2d3/0x390 [ 134.106995] do_exit+0x79d/0x2970 [ 134.107009] ? lock_release+0xc8/0x290 [ 134.107027] ? __pfx_do_exit+0x10/0x10 [ 134.107041] ? find_held_lock+0x2b/0x80 [ 134.107059] ? get_signal+0x835/0x2340 [ 134.107079] do_group_exit+0xd3/0x2a0 [ 134.107094] get_signal+0x2315/0x2340 [ 134.107117] ? __pfx_get_signal+0x10/0x10 [ 134.107134] ? do_futex+0x135/0x370 [ 134.107148] ? __pfx_do_futex+0x10/0x10 [ 134.107163] arch_do_signal_or_restart+0x80/0x790 [ 134.107182] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 134.107198] ? __x64_sys_futex+0x1c9/0x4d0 [ 134.107211] ? __x64_sys_futex+0x1d2/0x4d0 [ 134.107226] ? __pfx___x64_sys_futex+0x10/0x10 [ 134.107240] ? __sys_setsockopt+0x13f/0x1a0 [ 134.107263] exit_to_user_mode_loop+0x8b/0x110 [ 134.107276] do_syscall_64+0x2f7/0x360 [ 134.107290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.107302] RIP: 0033:0x7ff9231a4b19 [ 134.107311] Code: Unable to access opcode bytes at 0x7ff9231a4aef. [ 134.107316] RSP: 002b:00007ff92071a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.107328] RAX: fffffffffffffe00 RBX: 00007ff9232b7f68 RCX: 00007ff9231a4b19 [ 134.107336] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9232b7f68 [ 134.107343] RBP: 00007ff9232b7f60 R08: 0000000000000000 R09: 0000000000000000 [ 134.107350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9232b7f6c [ 134.107357] R13: 00007ffdb64ccecf R14: 00007ff92071a300 R15: 0000000000022000 [ 134.107373] [ 134.107377] kmemleak: Object (percpu) 0x607f1a63e7cc (size 8): [ 134.107384] kmemleak: comm "syz-executor.0", pid 4649, jiffies 4294800867 [ 134.107391] kmemleak: min_count = 1 [ 134.107395] kmemleak: count = 0 [ 134.107399] kmemleak: flags = 0x21 [ 134.107403] kmemleak: checksum = 0 [ 134.107407] kmemleak: backtrace: [ 134.107410] pcpu_alloc_noprof+0x87a/0x1170 [ 134.107426] alloc_vfsmnt+0x135/0x6e0 [ 134.107440] vfs_create_mount.part.0+0x40/0x440 [ 134.107456] fc_mount_longterm+0x126/0x160 [ 134.107471] mq_init_ns+0x42e/0x630 [ 134.107482] copy_ipcs+0x38d/0x630 [ 134.107491] create_new_namespaces+0x210/0xab0 [ 134.107508] unshare_nsproxy_namespaces+0xc0/0x200 [ 134.107525] ksys_unshare+0x468/0xa10 [ 134.107540] __x64_sys_unshare+0x31/0x40 [ 134.107552] do_syscall_64+0xbf/0x360 [ 134.107561] entry_SYSCALL_64_after_hwframe+0x77/0x7f 11:21:34 executing program 2: prctl$PR_SET_IO_FLUSHER(0x4d, 0x8) 11:21:34 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 11:21:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:21:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a09", 0x78, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {0x0, 0x0, 0x8c00}], 0x0, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@usrjquota}]}) 11:21:35 executing program 2: prctl$PR_SET_IO_FLUSHER(0x4d, 0x8) 11:21:35 executing program 0: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) finit_module(r0, 0x0, 0x0) [ 134.338168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.358897] loop5: detected capacity change from 0 to 140 [ 134.378586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.403956] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz-executor.5: iget: checksum invalid [ 134.418292] EXT4-fs (loop5): get root inode failed [ 134.419341] EXT4-fs (loop5): mount failed 11:21:35 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 11:21:35 executing program 0: write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x35, 0x1}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'sit0\x00', @dev}) memfd_create(&(0x7f0000000100)='^.[@-.!\x00', 0x4) gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000001200)) 11:21:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:21:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x84, 0x0, 0x0, &(0x7f0000000400), 0x0) 11:21:35 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x2c}}, 0x0) 11:21:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a09", 0x78, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {0x0, 0x0, 0x8c00}], 0x0, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@usrjquota}]}) 11:21:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:21:35 executing program 7: rseq(0x0, 0xfffffffffffffd88, 0x2000000002, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) write$char_usb(0xffffffffffffffff, &(0x7f00000000c0)="d22480cb27b71b8a44c2a173f3c59adca8e2e5252524886ff022a51a589eaafdd7f2a26b2d64", 0x26) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40086607, 0x0) [ 135.021308] loop5: detected capacity change from 0 to 140 11:21:35 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x2c}}, 0x0) [ 135.062830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.069090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x10, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf0}}, 0x14}}, 0x0) [ 135.088355] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz-executor.5: iget: checksum invalid 11:21:35 executing program 2: r0 = gettid() rt_sigqueueinfo(r0, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x6}) [ 135.100709] EXT4-fs (loop5): get root inode failed [ 135.101118] EXT4-fs (loop5): mount failed [ 135.109272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.114863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0d80", 0x2}], 0x1, &(0x7f0000000380)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x48014) 11:21:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x2c}}, 0x0) 11:21:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 11:21:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b313747", 0x1e}], 0x1) 11:21:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f00000001c0)) 11:21:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x2c}}, 0x0) 11:21:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 11:21:36 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0xfcb5}) sendfile(r1, r2, 0x0, 0xa0103) 11:21:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:21:36 executing program 7: rseq(0x0, 0xfffffffffffffd88, 0x2000000002, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) write$char_usb(0xffffffffffffffff, &(0x7f00000000c0)="d22480cb27b71b8a44c2a173f3c59adca8e2e5252524886ff022a51a589eaafdd7f2a26b2d64", 0x26) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40086607, 0x0) 11:21:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x14, 0x7}], 0x18) 11:21:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:21:36 executing program 5: rt_sigpending(&(0x7f0000000080), 0x8) [ 136.002856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.018143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x72d}, 0x14}}, 0x0) 11:21:36 executing program 6: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@generic={0x88f7}}}, 0x0) 11:21:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) [ 136.059511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x14, 0x7}], 0x18) 11:21:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 11:21:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0) sendfile(r0, r0, 0x0, 0xb67) 11:21:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x14, 0x7}], 0x18) 11:21:37 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x1c, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 11:21:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x72d}, 0x14}}, 0x0) [ 139.157338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.161263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.163417] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.168415] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.171607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.193185] Bluetooth: hci1: command tx timeout [ 143.240985] Bluetooth: hci1: command tx timeout [ 145.288859] Bluetooth: hci1: command tx timeout [ 147.336719] Bluetooth: hci1: command tx timeout [ 156.421867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.425152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.490159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.491292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.609447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.623767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:57 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0) sendfile(r0, r0, 0x0, 0xb67) 11:21:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x14, 0x7}], 0x18) 11:21:57 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x1c, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 11:21:57 executing program 4: getgid() 11:21:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x72d}, 0x14}}, 0x0) 11:21:57 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, 0xfffffffffffffffc) 11:21:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:21:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x72d}, 0x14}}, 0x0) 11:21:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x48, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 11:21:57 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) 11:21:57 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0) sendfile(r0, r0, 0x0, 0xb67) 11:21:57 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, 0xfffffffffffffffc) 11:21:57 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x1c, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 11:21:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2) [ 157.259969] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 157.275857] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 11:21:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x48, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 11:21:58 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0) sendfile(r0, r0, 0x0, 0xb67) [ 157.977378] syz-executor.3 (5213) used greatest stack depth: 23392 bytes left 11:21:58 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, 0xfffffffffffffffc) 11:21:58 executing program 4: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, 0x0, 0x0) 11:21:58 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x1c, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 11:21:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2) 11:21:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 11:21:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x48, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 11:21:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "d6bbce", 0x81}) 11:21:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:21:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2) 11:21:58 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @long}, 0x14) 11:21:58 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, 0xfffffffffffffffc) 11:21:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x16, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1}, 0x0) 11:21:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000dcf4655fdcf4655fdcf4655f00000000000002", 0x1b, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) 11:21:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x48, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 11:21:59 executing program 6: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 158.287086] loop4: detected capacity change from 0 to 2048 [ 158.336934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.346251] ext4 filesystem being mounted at /syzkaller-testdir230105469/syzkaller.RStRCt/50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.411551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.419859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.437548] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.442323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.443232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 158.447779] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 158.458983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.478233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.480582] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 158.484450] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 158.488620] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.489521] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 158.493807] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 158.497966] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 158.499344] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 158.503263] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 158.507572] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 158.508495] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 158.513542] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 158.517455] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 158.519509] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 158.523519] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 158.527501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.528361] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.533733] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.604547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.605818] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.608572] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.609762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.611494] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 158.612985] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 158.615047] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 158.616958] Bluetooth: hci1: Opcode 0x0c1a failed: -4 11:21:59 executing program 5: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x10}) fallocate(r0, 0x11, 0x0, 0x10001) 11:21:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) 11:21:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000dcf4655fdcf4655fdcf4655f00000000000002", 0x1b, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) 11:21:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2) 11:21:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc) 11:21:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:21:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000dcf4655fdcf4655fdcf4655f00000000000002", 0x1b, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) 11:21:59 executing program 6: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 159.034445] loop4: detected capacity change from 0 to 2048 [ 159.037095] loop1: detected capacity change from 0 to 2048 [ 159.094573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.098844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.105383] ext4 filesystem being mounted at /syzkaller-testdir723052202/syzkaller.qE5dbh/5/file0 supports timestamps until 2038-01-19 (0x7fffffff) 11:21:59 executing program 0: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x15, 0x0, 0x1) [ 159.110132] ext4 filesystem being mounted at /syzkaller-testdir230105469/syzkaller.RStRCt/51/file0 supports timestamps until 2038-01-19 (0x7fffffff) 11:21:59 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f0000000000)={0x34, 0x75, 0x0, {0xfffffffffffffeb3, "cc23123dc0c25183252923d7db0709000000000000006943ef51f410e478eb2135717a2296aff1fd26"}}, 0x34) 11:21:59 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x3f13, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0xbe, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 11:21:59 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2092020, &(0x7f0000000500)='huge=never') [ 159.135638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.136604] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.141094] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.147592] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.153700] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 159.154581] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 159.166938] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 159.170802] Bluetooth: hci1: Opcode 0x0c1a failed: -4 11:21:59 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f0000000000)={0x34, 0x75, 0x0, {0xfffffffffffffeb3, "cc23123dc0c25183252923d7db0709000000000000006943ef51f410e478eb2135717a2296aff1fd26"}}, 0x34) 11:22:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000dcf4655fdcf4655fdcf4655f00000000000002", 0x1b, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) 11:22:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000dcf4655fdcf4655fdcf4655f00000000000002", 0x1b, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) [ 159.258878] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.273635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:22:00 executing program 6: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:22:00 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2092020, &(0x7f0000000500)='huge=never') 11:22:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010100)="000000000000000000000000b0", 0xd, 0x4de}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}], 0x0, &(0x7f0000000040)={[{@min_batch_time}]}) 11:22:00 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f00000004c0)) [ 159.391876] loop4: detected capacity change from 0 to 2048 [ 159.423084] loop1: detected capacity change from 0 to 2048 [ 159.424475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.433393] ext4 filesystem being mounted at /syzkaller-testdir230105469/syzkaller.RStRCt/52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.462083] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.465743] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.466430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.467477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.468964] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.469768] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.471994] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 159.475341] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 159.477716] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 159.478442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.482135] ext4 filesystem being mounted at /syzkaller-testdir723052202/syzkaller.qE5dbh/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.529326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. VM DIAGNOSIS: 11:27:01 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=0000000000000002 RCX=ffffffff814673ce RDX=0000000000000002 RSI=0000000000000004 RDI=ffff88800e987444 RBP=ffffed1001d30e8b RSP=ffff88801723f8c0 R8 =0000000000000000 R9 =ffffed1001d30e88 R10=ffff88800e987447 R11=1ffff1100d9c6f7b R12=ffff88800e987d50 R13=ffff88800e987380 R14=ffffed1001d30faa R15=ffff88800e987444 RIP=ffffffff81467503 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c0002eee90 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555568c4fc58 CR3=000000000ca32000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004145e5c400000000 XMM03=00000000000000000000000000000000 XMM04=65735f676e6972755f6f69203d203072 XMM05=2c666666666666666666666666666666 XMM06=616e732474616e65706f0a2930783020 XMM07=6666666666666666783028746f687370 XMM08=663778302826202c6339666666666666 XMM09=307830202c2930343230303030303030 XMM10=6e61725f65736f6c630a29307830202c XMM11=666666666666667830202c3072286567 XMM12=0a29307830202c666666666666666666 XMM13=307830202c307830202c307830202c61 XMM14=2c307830202c307830202c307830202c XMM15=202c307830202c307830202c30783020 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84be3c0e RDX=ffffed100d9c6dd9 RSI=0000000000000004 RDI=ffff88806ce36ec0 RBP=ffff88806ce36ec0 RSP=ffff88804750fa40 R8 =0000000000000000 R9 =ffffed100d9c6dd8 R10=ffff88806ce36ec3 R11=0000000000000001 R12=1ffff11008ea1f49 R13=0000000000000003 R14=ffffed100d9c6dd8 R15=ffff88804750fa78 RIP=ffffffff84be3da0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556627b400 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055556627cc18 CR3=000000001f6cf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000