Warning: Permanently added '[localhost]:44599' (ECDSA) to the list of known hosts. 2024/12/13 16:01:25 fuzzer started 2024/12/13 16:01:25 dialing manager at localhost:36477 syzkaller login: [ 63.324967] cgroup: Unknown subsys name 'net' [ 63.434938] cgroup: Unknown subsys name 'cpuset' [ 63.470868] cgroup: Unknown subsys name 'rlimit' 2024/12/13 16:01:42 syscalls: 2217 2024/12/13 16:01:42 code coverage: enabled 2024/12/13 16:01:42 comparison tracing: enabled 2024/12/13 16:01:42 extra coverage: enabled 2024/12/13 16:01:42 setuid sandbox: enabled 2024/12/13 16:01:42 namespace sandbox: enabled 2024/12/13 16:01:42 Android sandbox: enabled 2024/12/13 16:01:42 fault injection: enabled 2024/12/13 16:01:42 leak checking: enabled 2024/12/13 16:01:42 net packet injection: enabled 2024/12/13 16:01:42 net device setup: enabled 2024/12/13 16:01:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/13 16:01:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/13 16:01:42 USB emulation: enabled 2024/12/13 16:01:42 hci packet injection: enabled 2024/12/13 16:01:42 wifi device emulation: enabled 2024/12/13 16:01:42 802.15.4 emulation: enabled 2024/12/13 16:01:42 fetching corpus: 0, signal 0/2000 (executing program) 2024/12/13 16:01:42 fetching corpus: 49, signal 28709/31984 (executing program) 2024/12/13 16:01:42 fetching corpus: 99, signal 38929/43469 (executing program) 2024/12/13 16:01:42 fetching corpus: 149, signal 43649/49443 (executing program) 2024/12/13 16:01:42 fetching corpus: 199, signal 50109/56940 (executing program) 2024/12/13 16:01:42 fetching corpus: 249, signal 53581/61491 (executing program) 2024/12/13 16:01:42 fetching corpus: 299, signal 60429/69051 (executing program) 2024/12/13 16:01:42 fetching corpus: 349, signal 63630/73138 (executing program) 2024/12/13 16:01:42 fetching corpus: 399, signal 66637/76987 (executing program) 2024/12/13 16:01:43 fetching corpus: 449, signal 71359/82262 (executing program) 2024/12/13 16:01:43 fetching corpus: 499, signal 74506/86130 (executing program) 2024/12/13 16:01:43 fetching corpus: 549, signal 77735/89986 (executing program) 2024/12/13 16:01:43 fetching corpus: 599, signal 79908/92842 (executing program) 2024/12/13 16:01:43 fetching corpus: 649, signal 81998/95600 (executing program) 2024/12/13 16:01:43 fetching corpus: 699, signal 83783/98013 (executing program) 2024/12/13 16:01:43 fetching corpus: 749, signal 86228/100911 (executing program) 2024/12/13 16:01:44 fetching corpus: 799, signal 88695/103765 (executing program) 2024/12/13 16:01:44 fetching corpus: 849, signal 91153/106513 (executing program) 2024/12/13 16:01:44 fetching corpus: 899, signal 92558/108447 (executing program) 2024/12/13 16:01:44 fetching corpus: 949, signal 94035/110363 (executing program) 2024/12/13 16:01:44 fetching corpus: 999, signal 96346/112883 (executing program) 2024/12/13 16:01:44 fetching corpus: 1049, signal 97837/114791 (executing program) 2024/12/13 16:01:44 fetching corpus: 1099, signal 99055/116445 (executing program) 2024/12/13 16:01:44 fetching corpus: 1149, signal 100075/117907 (executing program) 2024/12/13 16:01:45 fetching corpus: 1199, signal 102027/119988 (executing program) 2024/12/13 16:01:45 fetching corpus: 1249, signal 103628/121798 (executing program) 2024/12/13 16:01:45 fetching corpus: 1299, signal 104608/123139 (executing program) 2024/12/13 16:01:45 fetching corpus: 1349, signal 105796/124520 (executing program) 2024/12/13 16:01:45 fetching corpus: 1399, signal 109283/127455 (executing program) 2024/12/13 16:01:45 fetching corpus: 1449, signal 111378/129368 (executing program) 2024/12/13 16:01:45 fetching corpus: 1499, signal 112358/130549 (executing program) 2024/12/13 16:01:45 fetching corpus: 1549, signal 113543/131864 (executing program) 2024/12/13 16:01:46 fetching corpus: 1599, signal 114710/133167 (executing program) 2024/12/13 16:01:46 fetching corpus: 1649, signal 115886/134356 (executing program) 2024/12/13 16:01:46 fetching corpus: 1699, signal 116857/135412 (executing program) 2024/12/13 16:01:46 fetching corpus: 1749, signal 118285/136739 (executing program) 2024/12/13 16:01:46 fetching corpus: 1799, signal 119033/137701 (executing program) 2024/12/13 16:01:46 fetching corpus: 1849, signal 120105/138795 (executing program) 2024/12/13 16:01:46 fetching corpus: 1899, signal 121233/139878 (executing program) 2024/12/13 16:01:46 fetching corpus: 1949, signal 122106/140809 (executing program) 2024/12/13 16:01:47 fetching corpus: 1999, signal 122924/141687 (executing program) 2024/12/13 16:01:47 fetching corpus: 2049, signal 124104/142722 (executing program) 2024/12/13 16:01:47 fetching corpus: 2099, signal 125340/143730 (executing program) 2024/12/13 16:01:47 fetching corpus: 2149, signal 125861/144382 (executing program) 2024/12/13 16:01:47 fetching corpus: 2199, signal 126526/145077 (executing program) 2024/12/13 16:01:47 fetching corpus: 2249, signal 127816/145996 (executing program) 2024/12/13 16:01:47 fetching corpus: 2299, signal 128657/146737 (executing program) 2024/12/13 16:01:47 fetching corpus: 2349, signal 129515/147470 (executing program) 2024/12/13 16:01:48 fetching corpus: 2399, signal 130112/148074 (executing program) 2024/12/13 16:01:48 fetching corpus: 2449, signal 130939/148799 (executing program) 2024/12/13 16:01:48 fetching corpus: 2499, signal 131537/149340 (executing program) 2024/12/13 16:01:48 fetching corpus: 2549, signal 132223/149948 (executing program) 2024/12/13 16:01:48 fetching corpus: 2599, signal 132780/150479 (executing program) 2024/12/13 16:01:48 fetching corpus: 2649, signal 133581/151066 (executing program) 2024/12/13 16:01:48 fetching corpus: 2699, signal 134591/151702 (executing program) 2024/12/13 16:01:48 fetching corpus: 2749, signal 135249/152205 (executing program) 2024/12/13 16:01:48 fetching corpus: 2799, signal 135968/152700 (executing program) 2024/12/13 16:01:49 fetching corpus: 2849, signal 137012/153270 (executing program) 2024/12/13 16:01:49 fetching corpus: 2899, signal 137570/153739 (executing program) 2024/12/13 16:01:49 fetching corpus: 2949, signal 138539/154265 (executing program) 2024/12/13 16:01:49 fetching corpus: 2999, signal 139346/154728 (executing program) 2024/12/13 16:01:49 fetching corpus: 3049, signal 139965/155085 (executing program) 2024/12/13 16:01:49 fetching corpus: 3099, signal 140785/155502 (executing program) 2024/12/13 16:01:49 fetching corpus: 3149, signal 141370/155831 (executing program) 2024/12/13 16:01:50 fetching corpus: 3199, signal 141928/156182 (executing program) 2024/12/13 16:01:50 fetching corpus: 3249, signal 142519/156492 (executing program) 2024/12/13 16:01:50 fetching corpus: 3299, signal 142975/156778 (executing program) 2024/12/13 16:01:50 fetching corpus: 3349, signal 143448/157085 (executing program) 2024/12/13 16:01:50 fetching corpus: 3399, signal 144037/157335 (executing program) 2024/12/13 16:01:50 fetching corpus: 3449, signal 144464/157574 (executing program) 2024/12/13 16:01:50 fetching corpus: 3499, signal 144871/157783 (executing program) 2024/12/13 16:01:51 fetching corpus: 3549, signal 145385/158023 (executing program) 2024/12/13 16:01:51 fetching corpus: 3599, signal 146180/158265 (executing program) 2024/12/13 16:01:51 fetching corpus: 3649, signal 146699/158483 (executing program) 2024/12/13 16:01:51 fetching corpus: 3699, signal 147110/158646 (executing program) 2024/12/13 16:01:51 fetching corpus: 3749, signal 147639/158826 (executing program) 2024/12/13 16:01:51 fetching corpus: 3799, signal 148240/158975 (executing program) 2024/12/13 16:01:51 fetching corpus: 3849, signal 148635/159108 (executing program) 2024/12/13 16:01:51 fetching corpus: 3899, signal 149108/159258 (executing program) 2024/12/13 16:01:51 fetching corpus: 3949, signal 149491/159347 (executing program) 2024/12/13 16:01:52 fetching corpus: 3999, signal 150057/159347 (executing program) 2024/12/13 16:01:52 fetching corpus: 4049, signal 150781/159347 (executing program) 2024/12/13 16:01:52 fetching corpus: 4099, signal 151598/159347 (executing program) 2024/12/13 16:01:52 fetching corpus: 4149, signal 153034/159347 (executing program) 2024/12/13 16:01:52 fetching corpus: 4199, signal 153672/159347 (executing program) 2024/12/13 16:01:52 fetching corpus: 4249, signal 154073/159347 (executing program) 2024/12/13 16:01:52 fetching corpus: 4299, signal 155018/159347 (executing program) 2024/12/13 16:01:53 fetching corpus: 4349, signal 155394/159347 (executing program) 2024/12/13 16:01:53 fetching corpus: 4399, signal 156016/159347 (executing program) 2024/12/13 16:01:53 fetching corpus: 4449, signal 156708/159347 (executing program) 2024/12/13 16:01:53 fetching corpus: 4499, signal 157343/159347 (executing program) 2024/12/13 16:01:53 fetching corpus: 4549, signal 157934/159347 (executing program) 2024/12/13 16:01:53 fetching corpus: 4599, signal 158528/159347 (executing program) 2024/12/13 16:01:53 fetching corpus: 4608, signal 158591/159347 (executing program) 2024/12/13 16:01:53 fetching corpus: 4608, signal 158591/159347 (executing program) 2024/12/13 16:01:56 starting 8 fuzzer processes 16:01:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f00000069c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4cb1}}], 0x18}}], 0x2, 0x0) 16:01:56 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 16:01:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {@with_ht={{{0x0, 0x2, 0x3}, {}, @broadcast, @device_b, @from_mac}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) 16:01:56 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x90800, 0x3c, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="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"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="0042454130310100"/32, 0x20, 0x9800}, {&(0x7f0000010e00)="004e535230320100"/32, 0x20, 0xa000}, {&(0x7f0000010f00)="0054454130310100"/32, 0x20, 0xa800}, {&(0x7f0000011000)="01000200af000000fd9ef001200000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303132423500000000000000", 0x60, 0x10000}, {&(0x7f0000011100)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x100c0}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x10160}, {&(0x7f0000011300)="04000200e60000001faff0012100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x10800}, {&(0x7f0000011400)="000000000000000000000000000000000000000600"/32, 0x20, 0x108e0}, {&(0x7f0000011500)='\x00*genisoimage\x00'/32, 0x20, 0x10960}, {&(0x7f0000011600)="050002002300000068a1f001220000000200000001000000022b4e5352303200", 0x20, 0x11000}, {&(0x7f0000011700)="00000000000000000000000000000000000000000000000001000000010100001f000000002a67656e69736f696d61676500"/64, 0x40, 0x110a0}, {&(0x7f0000011800)="060002004f0000006411ae012300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x11800}, {&(0x7f0000011900)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x118c0}, {&(0x7f0000011a00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x119a0}, {&(0x7f0000011b00)="07000200b10000006d0f0800240000000400"/32, 0x20, 0x12000}, {&(0x7f0000011c00)="08000200200000000000f0012500"/32, 0x20, 0x12800}, {&(0x7f0000011d00)="010002007e0000009cbef001300000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303132453800000000000000", 0x60, 0x18000}, {&(0x7f0000011e00)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x180c0}, {&(0x7f0000011f00)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x18160}, {&(0x7f0000012000)="04000200f60000001faff0013100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x18800}, {&(0x7f0000012100)="000000000000000000000000000000000000000600"/32, 0x20, 0x188e0}, {&(0x7f0000012200)='\x00*genisoimage\x00'/32, 0x20, 0x18960}, {&(0x7f0000012300)="050002003300000068a1f001320000000200000001000000022b4e5352303200", 0x20, 0x19000}, {&(0x7f0000012400)="00000000000000000000000000000000000000000000000001000000010100001f000000002a67656e69736f696d61676500"/64, 0x40, 0x190a0}, {&(0x7f0000012500)="060002005f0000006411ae013300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x19800}, {&(0x7f0000012600)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x198c0}, {&(0x7f0000012700)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x199a0}, {&(0x7f0000012800)="07000200c10000006d0f0800340000000400"/32, 0x20, 0x1a000}, {&(0x7f0000012900)="08000200300000000000f0013500"/32, 0x20, 0x1a800}, {&(0x7f0000012a00)="09000200d00000000d027600400000007810e40709140b2a3a0000000100000000000000000000000c01000000000000000000000000000000000000000000000000000000000000010000002e000000000000001f000000002a67656e69736f696d61676500000000000000000000000000000000000000050000000200000002010201020100"/160, 0xa0, 0x20000}, {&(0x7f0000012b00)="080002003c0000000000f0014100"/32, 0x20, 0x20800}, {&(0x7f0000012c00)="02000200ce00000001d7f0010001000000800000200000000080000030000000", 0x20, 0x80000}, {&(0x7f0000012d00)="0001020032000000e559f001000000007810e40709140b2a3a0000000300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d00"/128, 0x80, 0x80800}, {&(0x7f0000012e00)="00000000000000000000000000000006004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000600"/128, 0x80, 0x808e0}, {&(0x7f0000012f00)="0000000000000000000000000000000000080000020000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000201030000000000", 0x40, 0x80980}, {&(0x7f0000013000)="08000200fc0000000000f0010100"/32, 0x20, 0x81000}, {&(0x7f0000013100)="050102004c000000f4a6a800020000000000000004000000010000040000000000003002ffffffffffffffffa51400000200000000000000080100000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000000000000000000000000000008000000080100000300"/192, 0xc0, 0x81800}, {&(0x7f0000013200)="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"/288, 0x120, 0x82000}, {&(0x7f0000013400)="05010200280000000173a800040000000000000004000000010000040000000000003002ffffffffffffffffa51400000100000000000000540000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000005010000000000000000000008000000540000000500"/192, 0xc0, 0x82800}, {&(0x7f0000013500)="01010200ca000000476218000500000001000a00000800000200000000000000000000000000000001010200d2000000affe1c000500000001000006000800000a000000000000000b01000000000866696c653000"/96, 0x60, 0x83000}, {&(0x7f0000013600)="050102001300000097c6a800060000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000640000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000007010000000000000000000008000000640000001700"/192, 0xc0, 0x83800}, {&(0x7f0000013700)="0501020061000000a406a800070000000000000004000000010000050000000000003002ffffffffffffffff8410000001000000000000000a0000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d61676500000000000000000000000000000000000000080100000000000000000000080000000a0000001800"/192, 0xc0, 0x84000}, {&(0x7f0000013800)="050102008c000000c50fa800080000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000009010000000000000000000008000000282300001900"/192, 0xc0, 0x84800}, {&(0x7f0000013900)="05010200cf000000c056a800090000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000a010000000000000000000008000000282300001900"/192, 0xc0, 0x85000}, {&(0x7f0000013a00)="05010200c400000023e7a8000a0000000000000004000000010000050000000000003002ffffffffffffffff8410000001000000000000001a0400000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000b0100000000000000000000080000001a0400001e00"/192, 0xc0, 0x85800}, {&(0x7f0000013b00)="01001401000001000000050015010000010046494c4530000000000000000000", 0x20, 0x86000}, {&(0x7f0000013c00)="01000000011400010000050000000115000146494c4530000000000000000000", 0x20, 0x87000}, {&(0x7f0000013d00)="010016010000010000000a0017010000010000660069006c0065003000000000", 0x20, 0x88000}, {&(0x7f0000013e00)="010000000116000100000a0000000117000100660069006c0065003000000000", 0x20, 0x89000}, {&(0x7f0000013f00)="2200140100000000011400080000000008007809140b2a3a080200000100000101002200140100000000011400080000000008007809140b2a3a080200000100000101012c00180100000000011864000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600150100000000011500080000000008007809140b2a3a08020000010000010546494c45302a0019010000000001190a0000000000000a7809140b2a3a08000000010000010846494c45312e3b31002a001a0100000000011a28230000000023287809140b2a3a08000000010000010846494c45322e3b31002a001a0100000000011a28230000000023287809140b2a3a08000000010000010846494c45332e3b3100"/288, 0x120, 0x8a000}, {&(0x7f0000014100)="2200150100000000011500080000000008007809140b2a3a080200000100000101002200140100000000011400080000000008007809140b2a3a080200000100000101012a001f0100000000011f1a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0x8a800}, {&(0x7f0000014200)="2200160100000000011600080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101013400180100000000011864000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00170100000000011700080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0019010000000001190a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c001a0100000000011a28230000000023287809140b2a3a08000000010000010a00660069006c00650032002c001a0100000000011a28230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0x8b000}, {&(0x7f0000014400)="2200170100000000011700080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101012c001f0100000000011f1a0400000000041a7809140b2a3a08000000010000010a00660069006c0065003000"/128, 0x80, 0x8b800}, {&(0x7f0000014500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8c000}, {&(0x7f0000014600)='syzkallers\x00'/32, 0x20, 0x8c800}, {&(0x7f0000014700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8f800}, {&(0x7f0000014c00)="02000200ee00000001d7f0012001000000800000200000000080000030000000", 0x20, 0x90000}], 0x0, &(0x7f0000014d00)) 16:01:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 93.869742] audit: type=1400 audit(1734105716.609:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:01:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpeername$packet(r1, 0x0, &(0x7f0000000300)) 16:01:56 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 16:01:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 95.388462] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.392006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.395267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.401473] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.405632] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.407876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.422897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.425698] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.427889] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.435858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.441557] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.443343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.454956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.466883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.484823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.491495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.495655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.497770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.503563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.507985] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.509817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.539245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.568757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.571907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.574640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.579596] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.583689] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.584723] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.607748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.616723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.618327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.619903] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.624577] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.626515] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.628819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.630219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.631494] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.638838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.640819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.656789] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.665870] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.667848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.680650] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.707734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.713723] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.722387] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.722952] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.727745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.462481] Bluetooth: hci0: command tx timeout [ 97.525536] Bluetooth: hci1: command tx timeout [ 97.589265] Bluetooth: hci4: command tx timeout [ 97.654248] Bluetooth: hci2: command tx timeout [ 97.717272] Bluetooth: hci6: command tx timeout [ 97.781363] Bluetooth: hci7: command tx timeout [ 97.781409] Bluetooth: hci3: command tx timeout [ 97.846149] Bluetooth: hci5: command tx timeout [ 99.509413] Bluetooth: hci0: command tx timeout [ 99.573303] Bluetooth: hci1: command tx timeout [ 99.638477] Bluetooth: hci4: command tx timeout [ 99.701390] Bluetooth: hci2: command tx timeout [ 99.765362] Bluetooth: hci6: command tx timeout [ 99.829321] Bluetooth: hci7: command tx timeout [ 99.830502] Bluetooth: hci3: command tx timeout [ 99.895225] Bluetooth: hci5: command tx timeout [ 101.557331] Bluetooth: hci0: command tx timeout [ 101.621269] Bluetooth: hci1: command tx timeout [ 101.688228] Bluetooth: hci4: command tx timeout [ 101.749292] Bluetooth: hci2: command tx timeout [ 101.814387] Bluetooth: hci6: command tx timeout [ 101.877334] Bluetooth: hci3: command tx timeout [ 101.878272] Bluetooth: hci7: command tx timeout [ 101.941359] Bluetooth: hci5: command tx timeout [ 103.606358] Bluetooth: hci0: command tx timeout [ 103.670265] Bluetooth: hci1: command tx timeout [ 103.733377] Bluetooth: hci4: command tx timeout [ 103.797245] Bluetooth: hci2: command tx timeout [ 103.863246] Bluetooth: hci6: command tx timeout [ 103.925287] Bluetooth: hci7: command tx timeout [ 103.925529] Bluetooth: hci3: command tx timeout [ 103.990390] Bluetooth: hci5: command tx timeout [ 157.823354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.828608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.832639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.837344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.840834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.843393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.893888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.905579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.907707] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.912778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.915832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.918128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.962776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.971487] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.975594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.982411] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.002442] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.004401] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.036361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.041550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.060577] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.068330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.093720] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.095661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.155510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.158421] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.163755] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.173362] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.175769] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.189370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.207080] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.208235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 158.211459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.219721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.232570] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.248544] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.309893] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.348428] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.357945] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.377574] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.383575] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.388371] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.391056] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.394515] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.432802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.456481] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.492382] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.496512] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.926250] Bluetooth: hci0: command tx timeout [ 159.989428] Bluetooth: hci1: command tx timeout [ 160.054251] Bluetooth: hci2: command tx timeout [ 160.182553] Bluetooth: hci3: command tx timeout [ 160.309360] Bluetooth: hci4: command tx timeout [ 160.375203] Bluetooth: hci5: command tx timeout [ 160.501352] Bluetooth: hci7: command tx timeout [ 160.565259] Bluetooth: hci6: command tx timeout [ 161.973244] Bluetooth: hci0: command tx timeout [ 162.038320] Bluetooth: hci1: command tx timeout [ 162.102320] Bluetooth: hci2: command tx timeout [ 162.232391] Bluetooth: hci3: command tx timeout [ 162.358244] Bluetooth: hci4: command tx timeout [ 162.421211] Bluetooth: hci5: command tx timeout [ 162.549426] Bluetooth: hci7: command tx timeout [ 162.615249] Bluetooth: hci6: command tx timeout [ 164.021354] Bluetooth: hci0: command tx timeout [ 164.086341] Bluetooth: hci1: command tx timeout [ 164.150229] Bluetooth: hci2: command tx timeout [ 164.279323] Bluetooth: hci3: command tx timeout [ 164.407185] Bluetooth: hci4: command tx timeout [ 164.469319] Bluetooth: hci5: command tx timeout [ 164.598248] Bluetooth: hci7: command tx timeout [ 164.661311] Bluetooth: hci6: command tx timeout [ 166.069379] Bluetooth: hci0: command tx timeout [ 166.133287] Bluetooth: hci1: command tx timeout [ 166.197343] Bluetooth: hci2: command tx timeout [ 166.326288] Bluetooth: hci3: command tx timeout [ 166.453301] Bluetooth: hci4: command tx timeout [ 166.517321] Bluetooth: hci5: command tx timeout [ 166.645331] Bluetooth: hci7: command tx timeout [ 166.709283] Bluetooth: hci6: command tx timeout [ 220.231725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.237253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.241290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.247744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.251110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.254693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.424233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.427830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.429955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.437605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.444707] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.451999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.620030] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.627758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.630016] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.638527] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.646688] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.648871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.695042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.695803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.703560] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.705503] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.707630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.709774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.713948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.716506] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.719699] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.722529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.727080] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.739484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.764435] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.784370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.788506] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.798932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.800789] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.816536] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.836375] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.839848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.844725] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.846363] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.848559] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.854311] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.860300] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.865391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.870566] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.898505] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.902574] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.910543] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 222.326527] Bluetooth: hci0: command tx timeout [ 222.519229] Bluetooth: hci1: command tx timeout [ 222.709496] Bluetooth: hci2: command tx timeout [ 222.773426] Bluetooth: hci3: command tx timeout [ 222.837277] Bluetooth: hci4: command tx timeout [ 222.965285] Bluetooth: hci7: command tx timeout [ 222.965345] Bluetooth: hci5: command tx timeout [ 222.966273] Bluetooth: hci6: command tx timeout [ 224.375173] Bluetooth: hci0: command tx timeout [ 224.565362] Bluetooth: hci1: command tx timeout [ 224.757229] Bluetooth: hci2: command tx timeout [ 224.821333] Bluetooth: hci3: command tx timeout [ 224.885299] Bluetooth: hci4: command tx timeout [ 225.013224] Bluetooth: hci6: command tx timeout [ 225.013700] Bluetooth: hci5: command tx timeout [ 225.013762] Bluetooth: hci7: command tx timeout [ 226.421213] Bluetooth: hci0: command tx timeout [ 226.613325] Bluetooth: hci1: command tx timeout [ 226.805218] Bluetooth: hci2: command tx timeout [ 226.869366] Bluetooth: hci3: command tx timeout [ 226.933238] Bluetooth: hci4: command tx timeout [ 227.061265] Bluetooth: hci6: command tx timeout [ 227.061371] Bluetooth: hci7: command tx timeout [ 227.061760] Bluetooth: hci5: command tx timeout [ 228.469249] Bluetooth: hci0: command tx timeout [ 228.661246] Bluetooth: hci1: command tx timeout [ 228.854024] Bluetooth: hci2: command tx timeout [ 228.917230] Bluetooth: hci3: command tx timeout [ 228.981231] Bluetooth: hci4: command tx timeout [ 229.109223] Bluetooth: hci5: command tx timeout [ 229.110401] Bluetooth: hci7: command tx timeout [ 229.110834] Bluetooth: hci6: command tx timeout [ 282.500087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.505280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.507929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.518283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.527492] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.533577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.827845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.842834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.844956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.855794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.863499] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.865810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.884346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.889655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.894302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.905985] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.909766] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.915586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.961038] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.968482] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.973501] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.981795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.997807] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 283.018862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.021497] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.023334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.025017] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.026736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.027988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.035737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.037361] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.041715] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 283.044748] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.046292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.084600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 283.086095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.088642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 283.093280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.101862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 283.108888] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 283.112552] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.140862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.164005] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.202908] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 283.221805] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 283.306185] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 283.357702] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 283.365570] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.598167] Bluetooth: hci0: command tx timeout [ 284.917218] Bluetooth: hci1: command tx timeout [ 284.981219] Bluetooth: hci2: command tx timeout [ 285.237365] Bluetooth: hci6: command tx timeout [ 285.238288] Bluetooth: hci5: command tx timeout [ 285.301201] Bluetooth: hci4: command tx timeout [ 285.301790] Bluetooth: hci3: command tx timeout [ 285.493218] Bluetooth: hci7: command tx timeout [ 286.645285] Bluetooth: hci0: command tx timeout [ 286.965234] Bluetooth: hci1: command tx timeout [ 287.029245] Bluetooth: hci2: command tx timeout [ 287.287182] Bluetooth: hci6: command tx timeout [ 287.287668] Bluetooth: hci5: command tx timeout [ 287.349710] Bluetooth: hci4: command tx timeout [ 287.351098] Bluetooth: hci3: command tx timeout [ 287.541255] Bluetooth: hci7: command tx timeout [ 288.693313] Bluetooth: hci0: command tx timeout [ 289.013199] Bluetooth: hci1: command tx timeout [ 289.077248] Bluetooth: hci2: command tx timeout [ 289.334178] Bluetooth: hci5: command tx timeout [ 289.334640] Bluetooth: hci6: command tx timeout [ 289.397336] Bluetooth: hci3: command tx timeout [ 289.397774] Bluetooth: hci4: command tx timeout [ 289.590003] Bluetooth: hci7: command tx timeout [ 290.741339] Bluetooth: hci0: command tx timeout [ 291.061626] Bluetooth: hci1: command tx timeout [ 291.126384] Bluetooth: hci2: command tx timeout [ 291.381386] Bluetooth: hci5: command tx timeout [ 291.381895] Bluetooth: hci6: command tx timeout [ 291.445357] Bluetooth: hci3: command tx timeout [ 291.445860] Bluetooth: hci4: command tx timeout [ 291.637178] Bluetooth: hci7: command tx timeout [ 338.810949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.811804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.156852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.158009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.377719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.378552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.557557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.558385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.656804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.657491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.744958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.745678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.789343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.789996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.839329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.839996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.955855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.956716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.060531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.061321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.176565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.177371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.273820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.274573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.372719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.373398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.537779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.538705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.704447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.705354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.767008] audit: type=1400 audit(1734105963.506:8): avc: denied { open } for pid=13978 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 340.772570] audit: type=1400 audit(1734105963.507:9): avc: denied { kernel } for pid=13978 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 340.799405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.800050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.325020] loop3: detected capacity change from 0 to 2304 [ 341.461192] loop7: detected capacity change from 0 to 40 16:06:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f00000069c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4cb1}}], 0x18}}], 0x2, 0x0) 16:06:04 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 16:06:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {@with_ht={{{0x0, 0x2, 0x3}, {}, @broadcast, @device_b, @from_mac}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) 16:06:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpeername$packet(r1, 0x0, &(0x7f0000000300)) 16:06:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16:06:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x100, {{0xa, 0x4e20, 0x264, @loopback, 0xffff7afb}}, {{0xa, 0x4e24, 0xfff, @empty, 0x3}}}, 0x108) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x46e456a}) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="3c7bbfa32a7e49d91efde143fd1a09c7542a582996b69ae06ca6bb404822388bebc3f146ded8583b1782e8659a7d123517544d4817f074564b5c51a2604854e838d509cee78c894d4b9af0d7d6af5281fd8d8371d2a1e39769c0280c4efedc04ef7e1d7875da25b6ade9996c91efb1d88b370e2fc56ab1e619dc3af09eb70ec23f7a0dcd25"]) 16:06:04 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 16:06:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 341.658103] hrtimer: interrupt took 23965 ns [ 341.718609] loop7: detected capacity change from 0 to 40 16:06:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {@with_ht={{{0x0, 0x2, 0x3}, {}, @broadcast, @device_b, @from_mac}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) 16:06:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpeername$packet(r1, 0x0, &(0x7f0000000300)) 16:06:04 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 16:06:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16:06:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f00000069c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4cb1}}], 0x18}}], 0x2, 0x0) 16:06:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 16:06:04 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 343.183001] loop7: detected capacity change from 0 to 40 16:06:07 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 16:06:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpeername$packet(r1, 0x0, &(0x7f0000000300)) 16:06:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f00000069c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4cb1}}], 0x18}}], 0x2, 0x0) 16:06:07 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 16:06:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 16:06:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16:06:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {@with_ht={{{0x0, 0x2, 0x3}, {}, @broadcast, @device_b, @from_mac}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) 16:06:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x100, {{0xa, 0x4e20, 0x264, @loopback, 0xffff7afb}}, {{0xa, 0x4e24, 0xfff, @empty, 0x3}}}, 0x108) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x46e456a}) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="3c7bbfa32a7e49d91efde143fd1a09c7542a582996b69ae06ca6bb404822388bebc3f146ded8583b1782e8659a7d123517544d4817f074564b5c51a2604854e838d509cee78c894d4b9af0d7d6af5281fd8d8371d2a1e39769c0280c4efedc04ef7e1d7875da25b6ade9996c91efb1d88b370e2fc56ab1e619dc3af09eb70ec23f7a0dcd25"]) [ 344.809412] loop7: detected capacity change from 0 to 40 16:06:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x100, {{0xa, 0x4e20, 0x264, @loopback, 0xffff7afb}}, {{0xa, 0x4e24, 0xfff, @empty, 0x3}}}, 0x108) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x46e456a}) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="3c7bbfa32a7e49d91efde143fd1a09c7542a582996b69ae06ca6bb404822388bebc3f146ded8583b1782e8659a7d123517544d4817f074564b5c51a2604854e838d509cee78c894d4b9af0d7d6af5281fd8d8371d2a1e39769c0280c4efedc04ef7e1d7875da25b6ade9996c91efb1d88b370e2fc56ab1e619dc3af09eb70ec23f7a0dcd25"]) 16:06:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x100, {{0xa, 0x4e20, 0x264, @loopback, 0xffff7afb}}, {{0xa, 0x4e24, 0xfff, @empty, 0x3}}}, 0x108) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x46e456a}) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="3c7bbfa32a7e49d91efde143fd1a09c7542a582996b69ae06ca6bb404822388bebc3f146ded8583b1782e8659a7d123517544d4817f074564b5c51a2604854e838d509cee78c894d4b9af0d7d6af5281fd8d8371d2a1e39769c0280c4efedc04ef7e1d7875da25b6ade9996c91efb1d88b370e2fc56ab1e619dc3af09eb70ec23f7a0dcd25"]) 16:06:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x100, {{0xa, 0x4e20, 0x264, @loopback, 0xffff7afb}}, {{0xa, 0x4e24, 0xfff, @empty, 0x3}}}, 0x108) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x46e456a}) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="3c7bbfa32a7e49d91efde143fd1a09c7542a582996b69ae06ca6bb404822388bebc3f146ded8583b1782e8659a7d123517544d4817f074564b5c51a2604854e838d509cee78c894d4b9af0d7d6af5281fd8d8371d2a1e39769c0280c4efedc04ef7e1d7875da25b6ade9996c91efb1d88b370e2fc56ab1e619dc3af09eb70ec23f7a0dcd25"]) 16:06:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x24a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 16:06:08 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @private=0xa010101, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x1, 0x0, 0xa}}}}}}, 0x0) 16:06:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x100, {{0xa, 0x4e20, 0x264, @loopback, 0xffff7afb}}, {{0xa, 0x4e24, 0xfff, @empty, 0x3}}}, 0x108) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x46e456a}) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="3c7bbfa32a7e49d91efde143fd1a09c7542a582996b69ae06ca6bb404822388bebc3f146ded8583b1782e8659a7d123517544d4817f074564b5c51a2604854e838d509cee78c894d4b9af0d7d6af5281fd8d8371d2a1e39769c0280c4efedc04ef7e1d7875da25b6ade9996c91efb1d88b370e2fc56ab1e619dc3af09eb70ec23f7a0dcd25"]) 16:06:08 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15) 16:06:08 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @private=0xa010101, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x1, 0x0, 0xa}}}}}}, 0x0) 16:06:08 executing program 1: socket$inet6(0xa, 0x3, 0x0) 16:06:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x81009431, &(0x7f0000000340)) 16:06:08 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @private=0xa010101, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x1, 0x0, 0xa}}}}}}, 0x0) 16:06:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) 16:06:09 executing program 1: socket$inet6(0xa, 0x3, 0x0) 16:06:09 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @private=0xa010101, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x1, 0x0, 0xa}}}}}}, 0x0) 16:06:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x100, {{0xa, 0x4e20, 0x264, @loopback, 0xffff7afb}}, {{0xa, 0x4e24, 0xfff, @empty, 0x3}}}, 0x108) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x46e456a}) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="3c7bbfa32a7e49d91efde143fd1a09c7542a582996b69ae06ca6bb404822388bebc3f146ded8583b1782e8659a7d123517544d4817f074564b5c51a2604854e838d509cee78c894d4b9af0d7d6af5281fd8d8371d2a1e39769c0280c4efedc04ef7e1d7875da25b6ade9996c91efb1d88b370e2fc56ab1e619dc3af09eb70ec23f7a0dcd25"]) [ 369.086872] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.4:14115] [ 369.087643] Modules linked in: [ 369.087922] irq event stamp: 2366689 [ 369.088226] hardirqs last enabled at (2366688): [] irqentry_exit+0x3b/0x90 [ 369.089486] hardirqs last disabled at (2366689): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 369.091496] softirqs last enabled at (2343170): [] handle_softirqs+0x50c/0x770 [ 369.093740] softirqs last disabled at (2343175): [] __irq_exit_rcu+0xc4/0x100 [ 369.095467] CPU: 1 UID: 0 PID: 14115 Comm: syz-executor.4 Not tainted 6.13.0-rc2-next-20241213 #1 [ 369.097082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 369.097775] RIP: 0010:__x86_indirect_thunk_rbx+0x0/0x20 [ 369.098269] Code: 00 00 00 00 66 0f 1f 44 00 00 e8 01 00 00 00 cc 48 89 14 24 e9 31 06 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 44 00 00 01 00 00 00 cc 48 89 1c 24 e9 11 06 00 00 66 66 2e 0f 1f 84 00 [ 369.099776] RSP: 0018:ffff88806cf096b0 EFLAGS: 00000286 [ 369.100250] RAX: ffffffff81b78541 RBX: ffffffff815f1180 RCX: 0000000000000001 [ 369.100872] RDX: 1ffff1100d9e12e2 RSI: ffffffff81b78541 RDI: ffff88806cf09780 [ 369.101482] RBP: ffff88806cf09750 R08: 0000000000000001 R09: ffff88806cf096f8 [ 369.102097] R10: 000000000003a808 R11: 0000000000022ac6 R12: ffff88806cf09780 [ 369.102708] R13: 0000000000000000 R14: ffff8880158e1bc0 R15: 0000000000000820 [ 369.103317] FS: 00007fbf9b613700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 369.104006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.104518] CR2: 0000001b33b23000 CR3: 000000003ced6000 CR4: 0000000000350ef0 [ 369.105141] Call Trace: [ 369.105378] [ 369.105589] ? watchdog_timer_fn+0x3ee/0x510 [ 369.106003] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 369.106446] ? __hrtimer_run_queues+0x57c/0xa80 [ 369.106892] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 369.107348] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 369.107866] ? hrtimer_interrupt+0x369/0x830 [ 369.108302] ? __sysvec_apic_timer_interrupt+0xc2/0x330 [ 369.108811] ? sysvec_apic_timer_interrupt+0x34/0x80 [ 369.109282] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.109787] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 369.110293] ? __d_alloc+0x31/0x990 [ 369.110667] ? __d_alloc+0x31/0x990 [ 369.111037] ? __x86_indirect_thunk_rdx+0x20/0x20 [ 369.111494] ? arch_stack_walk+0x77/0xf0 [ 369.111893] ? __d_alloc+0x31/0x990 [ 369.112278] ? stack_trace_save+0x8f/0xc0 [ 369.112685] ? __pfx_stack_trace_save+0x10/0x10 [ 369.113131] ? srso_return_thunk+0x5/0x5f [ 369.113535] ? lock_acquire+0x32/0xc0 [ 369.113908] ? __is_insn_slot_addr+0x2e/0x290 [ 369.114350] ? srso_return_thunk+0x5/0x5f [ 369.114751] ? hlock_class+0x4e/0x130 [ 369.115114] ? kasan_save_stack+0x24/0x50 [ 369.115531] ? kasan_save_stack+0x24/0x50 [ 369.115945] ? kasan_save_track+0x14/0x30 [ 369.116327] ? __kasan_slab_alloc+0x59/0x70 [ 369.116728] ? kmem_cache_alloc_node_noprof+0x14c/0x3e0 [ 369.117225] ? __alloc_skb+0x2ad/0x370 [ 369.117606] ? __netdev_alloc_skb+0x7a/0x7c0 [ 369.118029] ? __ieee80211_beacon_get+0x3f4/0xfc0 [ 369.118480] ? ieee80211_beacon_get_tim+0xa6/0x280 [ 369.118927] ? mac80211_hwsim_beacon_tx+0x49b/0x950 [ 369.119397] ? __iterate_interfaces+0x2e0/0x650 [ 369.119825] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 369.120396] ? mac80211_hwsim_beacon+0x105/0x200 [ 369.120861] ? __hrtimer_run_queues+0x1ab/0xa80 [ 369.121294] ? hrtimer_run_softirq+0x14c/0x310 [ 369.121713] ? handle_softirqs+0x1b1/0x770 [ 369.122116] ? __irq_exit_rcu+0xc4/0x100 [ 369.122504] ? irq_exit_rcu+0x9/0x20 [ 369.122869] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 369.123337] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.123838] ? put_cpu_partial+0x10a/0x1b0 [ 369.124241] ? qlist_free_all+0x50/0x160 [ 369.124644] ? kasan_quarantine_reduce+0x19f/0x240 [ 369.125104] ? __kasan_slab_alloc+0x49/0x70 [ 369.125491] ? kmem_cache_alloc_lru_noprof+0x14c/0x3c0 [ 369.125984] ? srso_return_thunk+0x5/0x5f [ 369.126377] ? hlock_class+0x4e/0x130 [ 369.126723] ? srso_return_thunk+0x5/0x5f [ 369.127116] ? __lock_acquire+0xc97/0x4360 [ 369.127512] ? srso_return_thunk+0x5/0x5f [ 369.127908] ? hlock_class+0x4e/0x130 [ 369.128254] ? srso_return_thunk+0x5/0x5f [ 369.128660] ? __lock_acquire+0xc97/0x4360 [ 369.129070] ? kasan_save_track+0x14/0x30 [ 369.129443] ? __kasan_slab_alloc+0x59/0x70 [ 369.129833] ? kmem_cache_alloc_node_noprof+0x14c/0x3e0 [ 369.130318] ? srso_return_thunk+0x5/0x5f [ 369.130709] ? __alloc_skb+0x2ad/0x370 [ 369.131093] ? __alloc_skb+0x2ad/0x370 [ 369.131463] ? __pfx___alloc_skb+0x10/0x10 [ 369.131864] ? srso_return_thunk+0x5/0x5f [ 369.132256] ? trace_lock_acquire+0x13b/0x1b0 [ 369.132680] ? __netdev_alloc_skb+0x7a/0x7c0 [ 369.133105] ? __ieee80211_beacon_get+0x3f4/0xfc0 [ 369.133561] ? ieee80211_beacon_get_tim+0xa6/0x280 [ 369.134008] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 369.134483] ? __up_read+0x2d0/0x750 [ 369.134844] ? srso_return_thunk+0x5/0x5f [ 369.135236] ? mark_lock+0xac/0xed0 [ 369.135582] ? srso_return_thunk+0x5/0x5f [ 369.135974] ? lock_is_held_type+0x9e/0x120 [ 369.136385] ? mac80211_hwsim_beacon_tx+0x49b/0x950 [ 369.136852] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 369.137303] ? srso_return_thunk+0x5/0x5f [ 369.137705] ? __iterate_interfaces+0x2e0/0x650 [ 369.138124] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 369.138607] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 369.139088] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 369.139650] ? mac80211_hwsim_beacon+0x105/0x200 [ 369.140100] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 369.140608] ? __hrtimer_run_queues+0x1ab/0xa80 [ 369.141043] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 369.141486] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 369.141993] ? hrtimer_run_softirq+0x14c/0x310 [ 369.142414] ? handle_softirqs+0x1b1/0x770 [ 369.142821] ? __irq_exit_rcu+0xc4/0x100 [ 369.143206] ? irq_exit_rcu+0x9/0x20 [ 369.143563] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 369.144021] [ 369.144235] [ 369.144448] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.144957] ? put_cpu_partial+0x106/0x1b0 [ 369.145351] ? put_cpu_partial+0x10a/0x1b0 [ 369.145756] ? qlist_free_all+0x50/0x160 [ 369.146152] ? kasan_quarantine_reduce+0x19f/0x240 [ 369.146618] ? __kasan_slab_alloc+0x49/0x70 [ 369.147009] ? kmem_cache_alloc_lru_noprof+0x14c/0x3c0 [ 369.147490] ? srso_return_thunk+0x5/0x5f [ 369.147882] ? mark_held_locks+0x9e/0xe0 [ 369.148262] ? __d_alloc+0x31/0x990 [ 369.148630] ? srso_return_thunk+0x5/0x5f [ 369.149031] ? __d_alloc+0x31/0x990 [ 369.149393] ? __d_lookup+0x255/0x490 [ 369.149760] ? d_alloc+0x4a/0x1e0 [ 369.150115] ? d_alloc_parallel+0xe6/0x1150 [ 369.150514] ? lock_release+0x20f/0x6f0 [ 369.150893] ? trace_lock_acquire+0x13b/0x1b0 [ 369.151300] ? lock_release+0x20f/0x6f0 [ 369.151681] ? __pfx_d_alloc_parallel+0x10/0x10 [ 369.152104] ? lock_is_held_type+0x9e/0x120 [ 369.152513] ? srso_return_thunk+0x5/0x5f [ 369.152914] ? __d_lookup+0x25f/0x490 [ 369.153287] ? lookup_open.isra.0+0x649/0x1620 [ 369.153721] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 369.154163] ? srso_return_thunk+0x5/0x5f [ 369.154569] ? path_openat+0x13a4/0x2990 [ 369.154978] ? srso_return_thunk+0x5/0x5f [ 369.155375] ? lookup_fast+0x14e/0x530 [ 369.155749] ? path_openat+0xc91/0x2990 [ 369.156153] ? __pfx_path_openat+0x10/0x10 [ 369.156559] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 369.157036] ? srso_return_thunk+0x5/0x5f [ 369.157443] ? do_filp_open+0x1e9/0x450 [ 369.157828] ? __pfx_do_filp_open+0x10/0x10 [ 369.158256] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 369.158694] ? lock_acquire+0x32/0xc0 [ 369.159061] ? srso_return_thunk+0x5/0x5f [ 369.159466] ? srso_return_thunk+0x5/0x5f [ 369.159858] ? alloc_fd+0x2c0/0x560 [ 369.160230] ? do_sys_openat2+0x164/0x1d0 [ 369.160627] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.161037] ? ktime_get+0x16d/0x270 [ 369.161399] ? srso_return_thunk+0x5/0x5f [ 369.161790] ? srso_return_thunk+0x5/0x5f [ 369.162189] ? clockevents_program_event+0x135/0x360 [ 369.162673] ? __x64_sys_openat+0x143/0x200 [ 369.163070] ? __pfx___x64_sys_openat+0x10/0x10 [ 369.163519] ? do_syscall_64+0xbf/0x1d0 [ 369.163910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.164410] [ 369.164635] Sending NMI from CPU 1 to CPUs 0: [ 369.165051] NMI backtrace for cpu 0 skipped: idling at default_idle+0x1e/0x30 16:06:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x100, {{0xa, 0x4e20, 0x264, @loopback, 0xffff7afb}}, {{0xa, 0x4e24, 0xfff, @empty, 0x3}}}, 0x108) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x46e456a}) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="3c7bbfa32a7e49d91efde143fd1a09c7542a582996b69ae06ca6bb404822388bebc3f146ded8583b1782e8659a7d123517544d4817f074564b5c51a2604854e838d509cee78c894d4b9af0d7d6af5281fd8d8371d2a1e39769c0280c4efedc04ef7e1d7875da25b6ade9996c91efb1d88b370e2fc56ab1e619dc3af09eb70ec23f7a0dcd25"]) 16:06:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) 16:06:31 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15) 16:06:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x100, {{0xa, 0x4e20, 0x264, @loopback, 0xffff7afb}}, {{0xa, 0x4e24, 0xfff, @empty, 0x3}}}, 0x108) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x46e456a}) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="3c7bbfa32a7e49d91efde143fd1a09c7542a582996b69ae06ca6bb404822388bebc3f146ded8583b1782e8659a7d123517544d4817f074564b5c51a2604854e838d509cee78c894d4b9af0d7d6af5281fd8d8371d2a1e39769c0280c4efedc04ef7e1d7875da25b6ade9996c91efb1d88b370e2fc56ab1e619dc3af09eb70ec23f7a0dcd25"]) 16:06:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x24a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 16:06:31 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15) 16:06:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x100, {{0xa, 0x4e20, 0x264, @loopback, 0xffff7afb}}, {{0xa, 0x4e24, 0xfff, @empty, 0x3}}}, 0x108) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, 0x0, 0x0, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x46e456a}) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="3c7bbfa32a7e49d91efde143fd1a09c7542a582996b69ae06ca6bb404822388bebc3f146ded8583b1782e8659a7d123517544d4817f074564b5c51a2604854e838d509cee78c894d4b9af0d7d6af5281fd8d8371d2a1e39769c0280c4efedc04ef7e1d7875da25b6ade9996c91efb1d88b370e2fc56ab1e619dc3af09eb70ec23f7a0dcd25"]) 16:06:31 executing program 1: socket$inet6(0xa, 0x3, 0x0) 16:06:32 executing program 1: socket$inet6(0xa, 0x3, 0x0) 16:06:34 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15) 16:06:34 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15) 16:06:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) 16:06:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) 16:06:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x24a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 16:06:34 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x6611, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x14, 0x1e, 0x0, 0x101, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:06:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 16:06:34 executing program 6: waitid(0x2, 0xffffffffffffffff, &(0x7f0000000080), 0x8, &(0x7f0000000100)) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x0, @fixed}}}, 0xa) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f00000001c0)={0x3, 0x1, 0x0, 0x6, 0x80, 0x0, @msf={0x3, 0x3, 0xd4}, @lba=0x8}) 16:06:34 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15) 16:06:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 16:06:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) 16:06:34 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x6611, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x14, 0x1e, 0x0, 0x101, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:06:34 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15) 16:06:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) 16:06:34 executing program 6: waitid(0x2, 0xffffffffffffffff, &(0x7f0000000080), 0x8, &(0x7f0000000100)) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x0, @fixed}}}, 0xa) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f00000001c0)={0x3, 0x1, 0x0, 0x6, 0x80, 0x0, @msf={0x3, 0x3, 0xd4}, @lba=0x8}) 16:06:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x24a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 16:06:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 16:06:35 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x6611, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x14, 0x1e, 0x0, 0x101, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:06:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) 16:06:35 executing program 5: waitid(0x2, 0xffffffffffffffff, &(0x7f0000000080), 0x8, &(0x7f0000000100)) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x0, @fixed}}}, 0xa) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f00000001c0)={0x3, 0x1, 0x0, 0x6, 0x80, 0x0, @msf={0x3, 0x3, 0xd4}, @lba=0x8}) 16:06:35 executing program 6: waitid(0x2, 0xffffffffffffffff, &(0x7f0000000080), 0x8, &(0x7f0000000100)) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x0, @fixed}}}, 0xa) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f00000001c0)={0x3, 0x1, 0x0, 0x6, 0x80, 0x0, @msf={0x3, 0x3, 0xd4}, @lba=0x8}) 16:06:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x80045440, &(0x7f0000000000)) 16:06:35 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x14, 0x0, 0x0, @remote}}}}}, 0x0) 16:06:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f00000001c0)="01", 0x1) 16:06:35 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x14, 0x0, 0x0, @remote}}}}}, 0x0) 16:06:35 executing program 5: waitid(0x2, 0xffffffffffffffff, &(0x7f0000000080), 0x8, &(0x7f0000000100)) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x0, @fixed}}}, 0xa) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f00000001c0)={0x3, 0x1, 0x0, 0x6, 0x80, 0x0, @msf={0x3, 0x3, 0xd4}, @lba=0x8}) 16:06:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 16:06:35 executing program 6: waitid(0x2, 0xffffffffffffffff, &(0x7f0000000080), 0x8, &(0x7f0000000100)) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x0, @fixed}}}, 0xa) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f00000001c0)={0x3, 0x1, 0x0, 0x6, 0x80, 0x0, @msf={0x3, 0x3, 0xd4}, @lba=0x8}) 16:06:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) 16:06:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f00000001c0)="01", 0x1) 16:06:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x80045440, &(0x7f0000000000)) 16:06:35 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x6611, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x14, 0x1e, 0x0, 0x101, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:06:35 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x14, 0x0, 0x0, @remote}}}}}, 0x0) 16:06:35 executing program 5: waitid(0x2, 0xffffffffffffffff, &(0x7f0000000080), 0x8, &(0x7f0000000100)) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x0, @fixed}}}, 0xa) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f00000001c0)={0x3, 0x1, 0x0, 0x6, 0x80, 0x0, @msf={0x3, 0x3, 0xd4}, @lba=0x8}) 16:06:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x80045440, &(0x7f0000000000)) 16:06:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f00000001c0)="01", 0x1) 16:06:35 executing program 6: r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f00000003c0)) r1 = fork() r2 = fork() r3 = fork() ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) ptrace(0x4208, r3) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f00000001c0)) wait4(r1, 0x0, 0x1000000, &(0x7f00000003c0)) ptrace(0x10, r1) pidfd_open(r0, 0x0) 16:06:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f00000001c0)="01", 0x1) 16:06:35 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0\x00') 16:06:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x0, 0x0, 0x80000000000}]}) 16:06:35 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x14, 0x0, 0x0, @remote}}}}}, 0x0) 16:06:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x80045440, &(0x7f0000000000)) 16:06:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x0, 0x0, 0x80000000000}]}) 16:06:36 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0\x00') 16:06:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f00000001c0)="01", 0x1) 16:06:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f00000001c0)="01", 0x1) 16:06:36 executing program 5: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:36 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@memory_localevents}]}) [ 373.471931] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 16:06:36 executing program 6: r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f00000003c0)) r1 = fork() r2 = fork() r3 = fork() ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) ptrace(0x4208, r3) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f00000001c0)) wait4(r1, 0x0, 0x1000000, &(0x7f00000003c0)) ptrace(0x10, r1) pidfd_open(r0, 0x0) 16:06:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x0, 0x0, 0x80000000000}]}) 16:06:36 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@memory_localevents}]}) 16:06:36 executing program 5: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:36 executing program 2: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:36 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0\x00') 16:06:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f00000001c0)="01", 0x1) 16:06:36 executing program 0: r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f00000003c0)) r1 = fork() r2 = fork() r3 = fork() ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) ptrace(0x4208, r3) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f00000001c0)) wait4(r1, 0x0, 0x1000000, &(0x7f00000003c0)) ptrace(0x10, r1) pidfd_open(r0, 0x0) 16:06:36 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0\x00') 16:06:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x0, 0x0, 0x80000000000}]}) 16:06:36 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@memory_localevents}]}) 16:06:36 executing program 3: r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f00000003c0)) r1 = fork() r2 = fork() r3 = fork() ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) ptrace(0x4208, r3) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f00000001c0)) wait4(r1, 0x0, 0x1000000, &(0x7f00000003c0)) ptrace(0x10, r1) pidfd_open(r0, 0x0) 16:06:36 executing program 5: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:36 executing program 2: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:36 executing program 1: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:36 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@memory_localevents}]}) 16:06:37 executing program 6: r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f00000003c0)) r1 = fork() r2 = fork() r3 = fork() ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) ptrace(0x4208, r3) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f00000001c0)) wait4(r1, 0x0, 0x1000000, &(0x7f00000003c0)) ptrace(0x10, r1) pidfd_open(r0, 0x0) 16:06:37 executing program 1: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:37 executing program 0: r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f00000003c0)) r1 = fork() r2 = fork() r3 = fork() ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) ptrace(0x4208, r3) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f00000001c0)) wait4(r1, 0x0, 0x1000000, &(0x7f00000003c0)) ptrace(0x10, r1) pidfd_open(r0, 0x0) 16:06:37 executing program 2: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:37 executing program 5: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:37 executing program 7: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:37 executing program 3: r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f00000003c0)) r1 = fork() r2 = fork() r3 = fork() ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) ptrace(0x4208, r3) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f00000001c0)) wait4(r1, 0x0, 0x1000000, &(0x7f00000003c0)) ptrace(0x10, r1) pidfd_open(r0, 0x0) 16:06:37 executing program 6: r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f00000003c0)) r1 = fork() r2 = fork() r3 = fork() ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) ptrace(0x4208, r3) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f00000001c0)) wait4(r1, 0x0, 0x1000000, &(0x7f00000003c0)) ptrace(0x10, r1) pidfd_open(r0, 0x0) 16:06:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0xfffffc01, 0x4) 16:06:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0xfffffc01, 0x4) 16:06:37 executing program 1: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x2201, &(0x7f0000000100)) 16:06:37 executing program 7: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) 16:06:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0xfffffc01, 0x4) 16:06:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) 16:06:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x2201, &(0x7f0000000100)) 16:06:38 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "d7e586900ba01197566607b319a7a21a1df1a90202ad03c88cecd523cc8bdeb10019de1ce5ddc13f38f5b79863d6c4d989c480483c472a5c025e50bde39d32f6"}}}}, 0x0) 16:06:38 executing program 7: r0 = syz_io_uring_setup(0x25e8, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x43, 0x0) pipe(&(0x7f0000000000)) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:38 executing program 0: r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f00000003c0)) r1 = fork() r2 = fork() r3 = fork() ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) ptrace(0x4208, r3) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f00000001c0)) wait4(r1, 0x0, 0x1000000, &(0x7f00000003c0)) ptrace(0x10, r1) pidfd_open(r0, 0x0) 16:06:38 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 16:06:38 executing program 3: r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f00000003c0)) r1 = fork() r2 = fork() r3 = fork() ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) ptrace(0x4208, r3) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f00000001c0)) wait4(r1, 0x0, 0x1000000, &(0x7f00000003c0)) ptrace(0x10, r1) pidfd_open(r0, 0x0) 16:06:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) 16:06:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x2201, &(0x7f0000000100)) 16:06:38 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "d7e586900ba01197566607b319a7a21a1df1a90202ad03c88cecd523cc8bdeb10019de1ce5ddc13f38f5b79863d6c4d989c480483c472a5c025e50bde39d32f6"}}}}, 0x0) 16:06:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0xfffffc01, 0x4) 16:06:38 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 16:06:38 executing program 7: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 16:06:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x2201, &(0x7f0000000100)) 16:06:38 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "d7e586900ba01197566607b319a7a21a1df1a90202ad03c88cecd523cc8bdeb10019de1ce5ddc13f38f5b79863d6c4d989c480483c472a5c025e50bde39d32f6"}}}}, 0x0) 16:06:38 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 16:06:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x1) r0 = fork() fork() perf_event_open(&(0x7f0000000100)={0x4, 0xfffffffffffffcdd, 0x3f, 0xc6, 0x3f, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x0, 0x1f, 0x0, 0x779a}, r0, 0xa, 0xffffffffffffffff, 0x3) 16:06:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 16:06:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "d7e586900ba01197566607b319a7a21a1df1a90202ad03c88cecd523cc8bdeb10019de1ce5ddc13f38f5b79863d6c4d989c480483c472a5c025e50bde39d32f6"}}}}, 0x0) 16:06:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) 16:06:38 executing program 7: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 16:06:38 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "d7e586900ba01197566607b319a7a21a1df1a90202ad03c88cecd523cc8bdeb10019de1ce5ddc13f38f5b79863d6c4d989c480483c472a5c025e50bde39d32f6"}}}}, 0x0) 16:06:38 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 16:06:38 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00') 16:06:38 executing program 7: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 16:06:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "d7e586900ba01197566607b319a7a21a1df1a90202ad03c88cecd523cc8bdeb10019de1ce5ddc13f38f5b79863d6c4d989c480483c472a5c025e50bde39d32f6"}}}}, 0x0) 16:06:38 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="d7061e52", 0x4}], 0x1}}], 0x1, 0x0) read(r0, 0x0, 0x5) 16:06:38 executing program 6: add_key(&(0x7f00000000c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:06:39 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00') 16:06:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)={[{@journal_path={'journal_path', 0x2c}}]}) [ 376.349243] journal_path: not usable as path [ 376.349727] EXT4-fs: error: could not find journal device path [ 376.359182] journal_path: not usable as path [ 376.359585] EXT4-fs: error: could not find journal device path 16:06:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 16:06:39 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="d7061e52", 0x4}], 0x1}}], 0x1, 0x0) read(r0, 0x0, 0x5) 16:06:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x1) r0 = fork() fork() perf_event_open(&(0x7f0000000100)={0x4, 0xfffffffffffffcdd, 0x3f, 0xc6, 0x3f, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x0, 0x1f, 0x0, 0x779a}, r0, 0xa, 0xffffffffffffffff, 0x3) 16:06:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "d7e586900ba01197566607b319a7a21a1df1a90202ad03c88cecd523cc8bdeb10019de1ce5ddc13f38f5b79863d6c4d989c480483c472a5c025e50bde39d32f6"}}}}, 0x0) 16:06:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)={[{@journal_path={'journal_path', 0x2c}}]}) 16:06:39 executing program 6: add_key(&(0x7f00000000c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:06:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x1) r0 = fork() fork() perf_event_open(&(0x7f0000000100)={0x4, 0xfffffffffffffcdd, 0x3f, 0xc6, 0x3f, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x0, 0x1f, 0x0, 0x779a}, r0, 0xa, 0xffffffffffffffff, 0x3) 16:06:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 16:06:39 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00') [ 376.718072] journal_path: not usable as path [ 376.718615] EXT4-fs: error: could not find journal device path 16:06:39 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="d7061e52", 0x4}], 0x1}}], 0x1, 0x0) read(r0, 0x0, 0x5) 16:06:39 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000001380)=""/4097, 0x1001, 0x4) 16:06:39 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00') 16:06:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)={[{@journal_path={'journal_path', 0x2c}}]}) 16:06:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 16:06:39 executing program 6: add_key(&(0x7f00000000c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:06:39 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="d7061e52", 0x4}], 0x1}}], 0x1, 0x0) read(r0, 0x0, 0x5) [ 377.016584] journal_path: not usable as path [ 377.017063] EXT4-fs: error: could not find journal device path 16:06:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x1) r0 = fork() fork() perf_event_open(&(0x7f0000000100)={0x4, 0xfffffffffffffcdd, 0x3f, 0xc6, 0x3f, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x0, 0x1f, 0x0, 0x779a}, r0, 0xa, 0xffffffffffffffff, 0x3) 16:06:39 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000001380)=""/4097, 0x1001, 0x4) 16:06:39 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/16, 0x10}}], 0x1, 0x0, 0x0) 16:06:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000001380)=""/4097, 0x1001, 0x4) 16:06:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)={[{@journal_path={'journal_path', 0x2c}}]}) 16:06:40 executing program 6: add_key(&(0x7f00000000c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:06:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000240008000f80100200040000000000000000000800029a0ec11f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000c1e670325132510000e67032510300000000002e2e2020202020202020201000c1e670325132510000e670325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000c1e670325132510000e670325104001a040000", 0x80, 0x1e00}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x2e00}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x3e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7e00}], 0x0, &(0x7f0000010d00)) 16:06:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x8, 0x0, 0x0) 16:06:40 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/16, 0x10}}], 0x1, 0x0, 0x0) 16:06:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x1) r0 = fork() fork() perf_event_open(&(0x7f0000000100)={0x4, 0xfffffffffffffcdd, 0x3f, 0xc6, 0x3f, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x0, 0x1f, 0x0, 0x779a}, r0, 0xa, 0xffffffffffffffff, 0x3) 16:06:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x1) r0 = fork() fork() perf_event_open(&(0x7f0000000100)={0x4, 0xfffffffffffffcdd, 0x3f, 0xc6, 0x3f, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x0, 0x1f, 0x0, 0x779a}, r0, 0xa, 0xffffffffffffffff, 0x3) [ 377.456067] loop1: detected capacity change from 0 to 128 [ 377.466002] journal_path: not usable as path [ 377.466526] EXT4-fs: error: could not find journal device path 16:06:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x8, 0x0, 0x0) 16:06:40 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/16, 0x10}}], 0x1, 0x0, 0x0) 16:06:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000001380)=""/4097, 0x1001, 0x4) 16:06:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000580)) ioctl$KDSKBENT(r0, 0x4b63, 0x0) 16:06:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x12, 0x0, 0x101}, 0x14}}, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) r2 = gettid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f00000005c0)={0x12, 0x0, 0x4000}) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_open_dev$hidraw(&(0x7f0000001a80), 0x1, 0x80800) [ 377.728238] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 16:06:40 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/16, 0x10}}], 0x1, 0x0, 0x0) 16:06:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x8, 0x0, 0x0) 16:06:40 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6}]}, 0x2c}}, 0x0) 16:06:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000001500)="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", 0x200) fsetxattr$security_capability(r1, &(0x7f0000002500), 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x100000) 16:06:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000580)) ioctl$KDSKBENT(r0, 0x4b63, 0x0) 16:06:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x1) r0 = fork() fork() perf_event_open(&(0x7f0000000100)={0x4, 0xfffffffffffffcdd, 0x3f, 0xc6, 0x3f, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x0, 0x1f, 0x0, 0x779a}, r0, 0xa, 0xffffffffffffffff, 0x3) 16:06:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x12, 0x0, 0x101}, 0x14}}, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) r2 = gettid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f00000005c0)={0x12, 0x0, 0x4000}) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_open_dev$hidraw(&(0x7f0000001a80), 0x1, 0x80800) 16:06:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x12, 0x0, 0x101}, 0x14}}, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) r2 = gettid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f00000005c0)={0x12, 0x0, 0x4000}) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_open_dev$hidraw(&(0x7f0000001a80), 0x1, 0x80800) 16:06:40 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6}]}, 0x2c}}, 0x0) 16:06:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000580)) ioctl$KDSKBENT(r0, 0x4b63, 0x0) 16:06:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x8, 0x0, 0x0) 16:06:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_timeval(r0, 0x1, 0x31, &(0x7f0000000100)={0x0, 0x2710}, 0x10) 16:06:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x12, 0x0, 0x101}, 0x14}}, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) r2 = gettid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f00000005c0)={0x12, 0x0, 0x4000}) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_open_dev$hidraw(&(0x7f0000001a80), 0x1, 0x80800) 16:06:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x12, 0x0, 0x101}, 0x14}}, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) r2 = gettid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f00000005c0)={0x12, 0x0, 0x4000}) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_open_dev$hidraw(&(0x7f0000001a80), 0x1, 0x80800) 16:06:40 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6}]}, 0x2c}}, 0x0) 16:06:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000001500)="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", 0x200) fsetxattr$security_capability(r1, &(0x7f0000002500), 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x100000) 16:06:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000580)) ioctl$KDSKBENT(r0, 0x4b63, 0x0) 16:06:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x12, 0x0, 0x101}, 0x14}}, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) r2 = gettid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f00000005c0)={0x12, 0x0, 0x4000}) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_open_dev$hidraw(&(0x7f0000001a80), 0x1, 0x80800) 16:06:41 executing program 0: mlock(&(0x7f0000ff2000/0xd000)=nil, 0xd000) munmap(&(0x7f0000fa8000/0xc000)=nil, 0xc000) mlock2(&(0x7f0000ea1000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mlock2(&(0x7f0000e0b000/0x4000)=nil, 0x4000, 0x0) pkey_mprotect(&(0x7f0000ef7000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 16:06:41 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6}]}, 0x2c}}, 0x0) 16:06:41 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 16:06:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_timeval(r0, 0x1, 0x31, &(0x7f0000000100)={0x0, 0x2710}, 0x10) 16:06:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x12, 0x0, 0x101}, 0x14}}, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) r2 = gettid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f00000005c0)={0x12, 0x0, 0x4000}) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_open_dev$hidraw(&(0x7f0000001a80), 0x1, 0x80800) 16:06:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000001500)="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", 0x200) fsetxattr$security_capability(r1, &(0x7f0000002500), 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x100000) 16:06:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) 16:06:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_timeval(r0, 0x1, 0x31, &(0x7f0000000100)={0x0, 0x2710}, 0x10) 16:06:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000001500)="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", 0x200) fsetxattr$security_capability(r1, &(0x7f0000002500), 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x100000) 16:06:41 executing program 0: mlock(&(0x7f0000ff2000/0xd000)=nil, 0xd000) munmap(&(0x7f0000fa8000/0xc000)=nil, 0xc000) mlock2(&(0x7f0000ea1000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mlock2(&(0x7f0000e0b000/0x4000)=nil, 0x4000, 0x0) pkey_mprotect(&(0x7f0000ef7000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 16:06:41 executing program 6: ioprio_set$pid(0x1, 0x0, 0x6000) clone3(&(0x7f00000002c0)={0x40084100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:06:41 executing program 5: perf_event_open(&(0x7f0000003400)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) 16:06:41 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 16:06:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_timeval(r0, 0x1, 0x31, &(0x7f0000000100)={0x0, 0x2710}, 0x10) 16:06:41 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 16:06:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) 16:06:41 executing program 5: perf_event_open(&(0x7f0000003400)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000003c0)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) 16:06:41 executing program 0: mlock(&(0x7f0000ff2000/0xd000)=nil, 0xd000) munmap(&(0x7f0000fa8000/0xc000)=nil, 0xc000) mlock2(&(0x7f0000ea1000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mlock2(&(0x7f0000e0b000/0x4000)=nil, 0x4000, 0x0) pkey_mprotect(&(0x7f0000ef7000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 16:06:41 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 16:06:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) VM DIAGNOSIS: 16:06:32 Registers: info registers vcpu 0 RAX=00000000000c96b9 RBX=0000000000000000 RCX=ffffffff84a57dd7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b281a RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6cba R10=ffff88806ce365d3 R11=0000000000000000 R12=ffffffff863fbe90 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a58d7e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f763218a008 CR3=0000000009c04000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=00000000000000006c2954fd07e5f19a XMM02=00000000000000000000000000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82841a25 RDI=ffffffff8867b180 RBP=ffffffff8867b140 RSP=ffff88806cf08e98 R8 =0000000000000000 R9 =ffffed1001552046 R10=000000000000003a R11=0000000000000001 R12=000000000000003a R13=ffffffff8867b140 R14=0000000000000010 R15=ffffffff82841a10 RIP=ffffffff82841a7d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbf9b613700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b33b23000 CR3=000000003ced6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000