Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:45317' (ECDSA) to the list of known hosts.
2026/01/13 09:01:34 fuzzer started
2026/01/13 09:01:35 dialing manager at localhost:38155
syzkaller login: [   43.132165] cgroup: Unknown subsys name 'net'
[   43.209519] cgroup: Unknown subsys name 'cpuset'
[   43.224122] cgroup: Unknown subsys name 'rlimit'
2026/01/13 09:01:44 syscalls: 2214
2026/01/13 09:01:44 code coverage: enabled
2026/01/13 09:01:44 comparison tracing: enabled
2026/01/13 09:01:44 extra coverage: enabled
2026/01/13 09:01:44 setuid sandbox: enabled
2026/01/13 09:01:44 namespace sandbox: enabled
2026/01/13 09:01:44 Android sandbox: enabled
2026/01/13 09:01:44 fault injection: enabled
2026/01/13 09:01:44 leak checking: enabled
2026/01/13 09:01:44 net packet injection: enabled
2026/01/13 09:01:44 net device setup: enabled
2026/01/13 09:01:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/13 09:01:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/13 09:01:44 USB emulation: enabled
2026/01/13 09:01:44 hci packet injection: enabled
2026/01/13 09:01:44 wifi device emulation: enabled
2026/01/13 09:01:44 802.15.4 emulation: enabled
2026/01/13 09:01:44 fetching corpus: 0, signal 0/2000 (executing program)
2026/01/13 09:01:44 fetching corpus: 50, signal 19493/23110 (executing program)
2026/01/13 09:01:44 fetching corpus: 100, signal 34376/39375 (executing program)
2026/01/13 09:01:44 fetching corpus: 150, signal 41370/47771 (executing program)
2026/01/13 09:01:45 fetching corpus: 200, signal 50514/58098 (executing program)
2026/01/13 09:01:45 fetching corpus: 250, signal 56356/65148 (executing program)
2026/01/13 09:01:45 fetching corpus: 300, signal 62982/72777 (executing program)
2026/01/13 09:01:45 fetching corpus: 350, signal 71277/81851 (executing program)
2026/01/13 09:01:45 fetching corpus: 400, signal 75761/87312 (executing program)
2026/01/13 09:01:45 fetching corpus: 450, signal 78759/91377 (executing program)
2026/01/13 09:01:45 fetching corpus: 500, signal 81768/95310 (executing program)
2026/01/13 09:01:45 fetching corpus: 550, signal 84852/99318 (executing program)
2026/01/13 09:01:46 fetching corpus: 600, signal 87448/102808 (executing program)
2026/01/13 09:01:46 fetching corpus: 650, signal 90122/106344 (executing program)
2026/01/13 09:01:46 fetching corpus: 700, signal 92306/109389 (executing program)
2026/01/13 09:01:46 fetching corpus: 750, signal 95280/113038 (executing program)
2026/01/13 09:01:46 fetching corpus: 800, signal 97383/115953 (executing program)
2026/01/13 09:01:46 fetching corpus: 850, signal 101380/120364 (executing program)
2026/01/13 09:01:46 fetching corpus: 900, signal 103638/123346 (executing program)
2026/01/13 09:01:46 fetching corpus: 950, signal 105990/126336 (executing program)
2026/01/13 09:01:47 fetching corpus: 1000, signal 108136/129124 (executing program)
2026/01/13 09:01:47 fetching corpus: 1050, signal 109998/131618 (executing program)
2026/01/13 09:01:47 fetching corpus: 1100, signal 112143/134321 (executing program)
2026/01/13 09:01:47 fetching corpus: 1150, signal 113281/136181 (executing program)
2026/01/13 09:01:47 fetching corpus: 1200, signal 114727/138258 (executing program)
2026/01/13 09:01:47 fetching corpus: 1250, signal 116667/140640 (executing program)
2026/01/13 09:01:47 fetching corpus: 1300, signal 117994/142589 (executing program)
2026/01/13 09:01:47 fetching corpus: 1350, signal 119439/144580 (executing program)
2026/01/13 09:01:47 fetching corpus: 1400, signal 120525/146305 (executing program)
2026/01/13 09:01:48 fetching corpus: 1450, signal 121765/148012 (executing program)
2026/01/13 09:01:48 fetching corpus: 1500, signal 123835/150365 (executing program)
2026/01/13 09:01:48 fetching corpus: 1550, signal 124661/151769 (executing program)
2026/01/13 09:01:48 fetching corpus: 1600, signal 125940/153510 (executing program)
2026/01/13 09:01:48 fetching corpus: 1650, signal 127055/155062 (executing program)
2026/01/13 09:01:48 fetching corpus: 1700, signal 128162/156599 (executing program)
2026/01/13 09:01:48 fetching corpus: 1750, signal 129070/158006 (executing program)
2026/01/13 09:01:48 fetching corpus: 1800, signal 130240/159554 (executing program)
2026/01/13 09:01:48 fetching corpus: 1850, signal 131660/161254 (executing program)
2026/01/13 09:01:49 fetching corpus: 1900, signal 132431/162480 (executing program)
2026/01/13 09:01:49 fetching corpus: 1950, signal 134459/164566 (executing program)
2026/01/13 09:01:49 fetching corpus: 2000, signal 135237/165757 (executing program)
2026/01/13 09:01:49 fetching corpus: 2050, signal 136114/167033 (executing program)
2026/01/13 09:01:49 fetching corpus: 2100, signal 137017/168315 (executing program)
2026/01/13 09:01:49 fetching corpus: 2150, signal 137775/169464 (executing program)
2026/01/13 09:01:49 fetching corpus: 2200, signal 138420/170601 (executing program)
2026/01/13 09:01:49 fetching corpus: 2250, signal 139522/171955 (executing program)
2026/01/13 09:01:49 fetching corpus: 2300, signal 140279/173094 (executing program)
2026/01/13 09:01:49 fetching corpus: 2350, signal 141007/174174 (executing program)
2026/01/13 09:01:50 fetching corpus: 2400, signal 141730/175254 (executing program)
2026/01/13 09:01:50 fetching corpus: 2450, signal 142491/176373 (executing program)
2026/01/13 09:01:50 fetching corpus: 2500, signal 143531/177565 (executing program)
2026/01/13 09:01:50 fetching corpus: 2550, signal 144252/178590 (executing program)
2026/01/13 09:01:50 fetching corpus: 2600, signal 145757/180131 (executing program)
2026/01/13 09:01:50 fetching corpus: 2650, signal 146519/181131 (executing program)
2026/01/13 09:01:50 fetching corpus: 2700, signal 147533/182300 (executing program)
2026/01/13 09:01:50 fetching corpus: 2750, signal 148520/183400 (executing program)
2026/01/13 09:01:50 fetching corpus: 2800, signal 148961/184228 (executing program)
2026/01/13 09:01:51 fetching corpus: 2850, signal 149834/185288 (executing program)
2026/01/13 09:01:51 fetching corpus: 2900, signal 150583/186217 (executing program)
2026/01/13 09:01:51 fetching corpus: 2950, signal 151474/187188 (executing program)
2026/01/13 09:01:51 fetching corpus: 3000, signal 152889/188478 (executing program)
2026/01/13 09:01:51 fetching corpus: 3050, signal 154221/189590 (executing program)
2026/01/13 09:01:51 fetching corpus: 3100, signal 154668/190362 (executing program)
2026/01/13 09:01:51 fetching corpus: 3150, signal 155189/191132 (executing program)
2026/01/13 09:01:51 fetching corpus: 3200, signal 155703/191917 (executing program)
2026/01/13 09:01:52 fetching corpus: 3250, signal 156250/192698 (executing program)
2026/01/13 09:01:52 fetching corpus: 3300, signal 156868/193422 (executing program)
2026/01/13 09:01:52 fetching corpus: 3350, signal 157987/194388 (executing program)
2026/01/13 09:01:52 fetching corpus: 3400, signal 158718/195186 (executing program)
2026/01/13 09:01:52 fetching corpus: 3450, signal 159112/195859 (executing program)
2026/01/13 09:01:52 fetching corpus: 3500, signal 159604/196541 (executing program)
2026/01/13 09:01:52 fetching corpus: 3550, signal 160167/197254 (executing program)
2026/01/13 09:01:52 fetching corpus: 3600, signal 161347/198202 (executing program)
2026/01/13 09:01:53 fetching corpus: 3650, signal 162001/198936 (executing program)
2026/01/13 09:01:53 fetching corpus: 3700, signal 162564/199575 (executing program)
2026/01/13 09:01:53 fetching corpus: 3750, signal 163034/200192 (executing program)
2026/01/13 09:01:53 fetching corpus: 3800, signal 163585/200830 (executing program)
2026/01/13 09:01:53 fetching corpus: 3850, signal 164140/201435 (executing program)
2026/01/13 09:01:53 fetching corpus: 3900, signal 164719/202085 (executing program)
2026/01/13 09:01:53 fetching corpus: 3950, signal 165459/202737 (executing program)
2026/01/13 09:01:53 fetching corpus: 4000, signal 166253/203375 (executing program)
2026/01/13 09:01:53 fetching corpus: 4050, signal 166948/204021 (executing program)
2026/01/13 09:01:53 fetching corpus: 4100, signal 167439/204613 (executing program)
2026/01/13 09:01:54 fetching corpus: 4150, signal 168025/205237 (executing program)
2026/01/13 09:01:54 fetching corpus: 4200, signal 168573/205769 (executing program)
2026/01/13 09:01:54 fetching corpus: 4250, signal 169052/206275 (executing program)
2026/01/13 09:01:54 fetching corpus: 4300, signal 169656/206836 (executing program)
2026/01/13 09:01:54 fetching corpus: 4350, signal 170370/207392 (executing program)
2026/01/13 09:01:54 fetching corpus: 4400, signal 171068/207939 (executing program)
2026/01/13 09:01:54 fetching corpus: 4450, signal 171734/208452 (executing program)
2026/01/13 09:01:54 fetching corpus: 4500, signal 172213/208949 (executing program)
2026/01/13 09:01:54 fetching corpus: 4550, signal 172720/209461 (executing program)
2026/01/13 09:01:54 fetching corpus: 4600, signal 173150/209941 (executing program)
2026/01/13 09:01:55 fetching corpus: 4650, signal 173627/210357 (executing program)
2026/01/13 09:01:55 fetching corpus: 4700, signal 174188/210821 (executing program)
2026/01/13 09:01:55 fetching corpus: 4750, signal 174573/211246 (executing program)
2026/01/13 09:01:55 fetching corpus: 4800, signal 175325/211725 (executing program)
2026/01/13 09:01:55 fetching corpus: 4850, signal 175724/212130 (executing program)
2026/01/13 09:01:55 fetching corpus: 4900, signal 176215/212523 (executing program)
2026/01/13 09:01:55 fetching corpus: 4950, signal 176621/212910 (executing program)
2026/01/13 09:01:55 fetching corpus: 5000, signal 177136/213321 (executing program)
2026/01/13 09:01:55 fetching corpus: 5050, signal 177550/213725 (executing program)
2026/01/13 09:01:55 fetching corpus: 5100, signal 177979/214091 (executing program)
2026/01/13 09:01:56 fetching corpus: 5150, signal 178348/214453 (executing program)
2026/01/13 09:01:56 fetching corpus: 5200, signal 178666/214798 (executing program)
2026/01/13 09:01:56 fetching corpus: 5250, signal 178996/215186 (executing program)
2026/01/13 09:01:56 fetching corpus: 5300, signal 179310/215505 (executing program)
2026/01/13 09:01:56 fetching corpus: 5350, signal 179918/215505 (executing program)
2026/01/13 09:01:56 fetching corpus: 5400, signal 180419/215505 (executing program)
2026/01/13 09:01:56 fetching corpus: 5450, signal 180833/215505 (executing program)
2026/01/13 09:01:56 fetching corpus: 5500, signal 181354/215507 (executing program)
2026/01/13 09:01:56 fetching corpus: 5550, signal 181812/215507 (executing program)
2026/01/13 09:01:57 fetching corpus: 5600, signal 182248/215507 (executing program)
2026/01/13 09:01:57 fetching corpus: 5650, signal 182895/215507 (executing program)
2026/01/13 09:01:57 fetching corpus: 5700, signal 183518/215507 (executing program)
2026/01/13 09:01:57 fetching corpus: 5750, signal 183905/215507 (executing program)
2026/01/13 09:01:57 fetching corpus: 5800, signal 184228/215512 (executing program)
2026/01/13 09:01:57 fetching corpus: 5850, signal 184678/215512 (executing program)
2026/01/13 09:01:57 fetching corpus: 5900, signal 185091/215512 (executing program)
2026/01/13 09:01:57 fetching corpus: 5950, signal 185552/215512 (executing program)
2026/01/13 09:01:57 fetching corpus: 6000, signal 185889/215513 (executing program)
2026/01/13 09:01:58 fetching corpus: 6050, signal 186395/215523 (executing program)
2026/01/13 09:01:58 fetching corpus: 6100, signal 186734/215523 (executing program)
2026/01/13 09:01:58 fetching corpus: 6150, signal 187447/215523 (executing program)
2026/01/13 09:01:58 fetching corpus: 6200, signal 187904/215559 (executing program)
2026/01/13 09:01:58 fetching corpus: 6250, signal 188359/215560 (executing program)
2026/01/13 09:01:58 fetching corpus: 6300, signal 188633/215560 (executing program)
2026/01/13 09:01:58 fetching corpus: 6350, signal 188954/215560 (executing program)
2026/01/13 09:01:58 fetching corpus: 6400, signal 189308/215560 (executing program)
2026/01/13 09:01:58 fetching corpus: 6450, signal 189517/215562 (executing program)
2026/01/13 09:01:58 fetching corpus: 6500, signal 189877/215562 (executing program)
2026/01/13 09:01:58 fetching corpus: 6550, signal 190197/215562 (executing program)
2026/01/13 09:01:59 fetching corpus: 6600, signal 190761/215567 (executing program)
2026/01/13 09:01:59 fetching corpus: 6650, signal 191171/215567 (executing program)
2026/01/13 09:01:59 fetching corpus: 6700, signal 191409/215580 (executing program)
2026/01/13 09:01:59 fetching corpus: 6750, signal 191808/215580 (executing program)
2026/01/13 09:01:59 fetching corpus: 6800, signal 192372/215581 (executing program)
2026/01/13 09:01:59 fetching corpus: 6850, signal 192656/215581 (executing program)
2026/01/13 09:01:59 fetching corpus: 6900, signal 192906/215586 (executing program)
2026/01/13 09:01:59 fetching corpus: 6950, signal 193225/215586 (executing program)
2026/01/13 09:01:59 fetching corpus: 7000, signal 193560/215586 (executing program)
2026/01/13 09:01:59 fetching corpus: 7050, signal 193861/215588 (executing program)
2026/01/13 09:02:00 fetching corpus: 7100, signal 194218/215589 (executing program)
2026/01/13 09:02:00 fetching corpus: 7150, signal 194619/215598 (executing program)
2026/01/13 09:02:00 fetching corpus: 7200, signal 195010/215598 (executing program)
2026/01/13 09:02:00 fetching corpus: 7250, signal 195333/215601 (executing program)
2026/01/13 09:02:00 fetching corpus: 7300, signal 195660/215601 (executing program)
2026/01/13 09:02:00 fetching corpus: 7350, signal 195976/215603 (executing program)
2026/01/13 09:02:00 fetching corpus: 7400, signal 196276/215611 (executing program)
2026/01/13 09:02:00 fetching corpus: 7450, signal 196629/215611 (executing program)
2026/01/13 09:02:00 fetching corpus: 7500, signal 196990/215611 (executing program)
2026/01/13 09:02:01 fetching corpus: 7550, signal 197390/215611 (executing program)
2026/01/13 09:02:01 fetching corpus: 7600, signal 197693/215612 (executing program)
2026/01/13 09:02:01 fetching corpus: 7650, signal 198043/215612 (executing program)
2026/01/13 09:02:01 fetching corpus: 7700, signal 198630/215614 (executing program)
2026/01/13 09:02:01 fetching corpus: 7750, signal 199151/215615 (executing program)
2026/01/13 09:02:01 fetching corpus: 7800, signal 199441/215615 (executing program)
2026/01/13 09:02:01 fetching corpus: 7850, signal 199780/215615 (executing program)
2026/01/13 09:02:01 fetching corpus: 7900, signal 200121/215615 (executing program)
2026/01/13 09:02:01 fetching corpus: 7950, signal 200343/215615 (executing program)
2026/01/13 09:02:02 fetching corpus: 8000, signal 200648/215615 (executing program)
2026/01/13 09:02:02 fetching corpus: 8050, signal 200966/215616 (executing program)
2026/01/13 09:02:02 fetching corpus: 8100, signal 201214/215616 (executing program)
2026/01/13 09:02:02 fetching corpus: 8150, signal 201479/215616 (executing program)
2026/01/13 09:02:02 fetching corpus: 8200, signal 201868/215616 (executing program)
2026/01/13 09:02:02 fetching corpus: 8250, signal 202126/215616 (executing program)
2026/01/13 09:02:02 fetching corpus: 8300, signal 202505/215616 (executing program)
2026/01/13 09:02:02 fetching corpus: 8350, signal 202864/215616 (executing program)
2026/01/13 09:02:02 fetching corpus: 8400, signal 203089/215616 (executing program)
2026/01/13 09:02:03 fetching corpus: 8450, signal 203439/215620 (executing program)
2026/01/13 09:02:03 fetching corpus: 8500, signal 203769/215620 (executing program)
2026/01/13 09:02:03 fetching corpus: 8550, signal 204033/215621 (executing program)
2026/01/13 09:02:03 fetching corpus: 8600, signal 204342/215623 (executing program)
2026/01/13 09:02:03 fetching corpus: 8650, signal 204704/215623 (executing program)
2026/01/13 09:02:03 fetching corpus: 8700, signal 204924/215626 (executing program)
2026/01/13 09:02:03 fetching corpus: 8750, signal 205135/215626 (executing program)
2026/01/13 09:02:03 fetching corpus: 8800, signal 205355/215628 (executing program)
2026/01/13 09:02:04 fetching corpus: 8850, signal 205684/215628 (executing program)
2026/01/13 09:02:04 fetching corpus: 8900, signal 205982/215630 (executing program)
2026/01/13 09:02:04 fetching corpus: 8950, signal 206295/215630 (executing program)
2026/01/13 09:02:04 fetching corpus: 9000, signal 206619/215630 (executing program)
2026/01/13 09:02:04 fetching corpus: 9050, signal 207001/215630 (executing program)
2026/01/13 09:02:04 fetching corpus: 9100, signal 207275/215630 (executing program)
2026/01/13 09:02:04 fetching corpus: 9150, signal 207463/215630 (executing program)
2026/01/13 09:02:04 fetching corpus: 9200, signal 207730/215633 (executing program)
2026/01/13 09:02:04 fetching corpus: 9250, signal 208063/215637 (executing program)
2026/01/13 09:02:05 fetching corpus: 9300, signal 208332/215642 (executing program)
2026/01/13 09:02:05 fetching corpus: 9350, signal 208607/215642 (executing program)
2026/01/13 09:02:05 fetching corpus: 9400, signal 209290/215643 (executing program)
2026/01/13 09:02:05 fetching corpus: 9450, signal 209588/215643 (executing program)
2026/01/13 09:02:05 fetching corpus: 9500, signal 209782/215646 (executing program)
2026/01/13 09:02:05 fetching corpus: 9550, signal 209988/215646 (executing program)
2026/01/13 09:02:05 fetching corpus: 9600, signal 210307/215647 (executing program)
2026/01/13 09:02:05 fetching corpus: 9650, signal 210591/215659 (executing program)
2026/01/13 09:02:05 fetching corpus: 9700, signal 211037/215659 (executing program)
2026/01/13 09:02:06 fetching corpus: 9750, signal 211246/215659 (executing program)
2026/01/13 09:02:06 fetching corpus: 9800, signal 211433/215659 (executing program)
2026/01/13 09:02:06 fetching corpus: 9850, signal 211746/215659 (executing program)
2026/01/13 09:02:06 fetching corpus: 9900, signal 212030/215659 (executing program)
2026/01/13 09:02:06 fetching corpus: 9950, signal 212297/215659 (executing program)
2026/01/13 09:02:06 fetching corpus: 10000, signal 212627/215659 (executing program)
2026/01/13 09:02:06 fetching corpus: 10050, signal 212844/215661 (executing program)
2026/01/13 09:02:06 fetching corpus: 10100, signal 213038/215661 (executing program)
2026/01/13 09:02:06 fetching corpus: 10150, signal 213243/215661 (executing program)
2026/01/13 09:02:07 fetching corpus: 10200, signal 213474/215675 (executing program)
2026/01/13 09:02:07 fetching corpus: 10250, signal 213749/215675 (executing program)
2026/01/13 09:02:07 fetching corpus: 10300, signal 214026/215675 (executing program)
2026/01/13 09:02:07 fetching corpus: 10350, signal 214341/215675 (executing program)
2026/01/13 09:02:07 fetching corpus: 10354, signal 214355/215675 (executing program)
2026/01/13 09:02:07 fetching corpus: 10354, signal 214355/215675 (executing program)
2026/01/13 09:02:09 starting 8 fuzzer processes
09:02:09 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)

09:02:09 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00')
pread64(r0, &(0x7f00000001c0)=""/4, 0x4, 0x0)

09:02:09 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001500)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

09:02:09 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "968f3f8ed90a2a64ed55a1d6020ef9464cd4c5"})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cf78aa0900dc6c04"})

09:02:09 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x3b, {@private1}}}], 0x28}, 0x0)

09:02:09 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

09:02:09 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x5, &(0x7f0000000040)=0x1a, 0x4)

09:02:09 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0)

[   77.478314] audit: type=1400 audit(1768294929.614:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   78.588125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.591078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.593429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.598350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.601510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.652137] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.665537] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.670209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.674788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.678435] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.683057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.685225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.687465] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.689304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.691537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.732101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.756725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.758040] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.760629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.769384] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   78.774075] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.775306] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.781155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   78.785075] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.787072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   78.792503] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   78.793139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   78.794455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   78.796129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.800025] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   78.800062] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.803458] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   78.807230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.807442] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   78.829487] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   78.835048] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   78.841019] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   78.867501] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   78.874918] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   78.876725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   80.622180] Bluetooth: hci0: command tx timeout
[   80.750260] Bluetooth: hci2: command tx timeout
[   80.750858] Bluetooth: hci1: command tx timeout
[   80.878489] Bluetooth: hci4: command tx timeout
[   80.879032] Bluetooth: hci3: command tx timeout
[   80.879664] Bluetooth: hci5: command tx timeout
[   80.879860] Bluetooth: hci6: command tx timeout
[   80.942853] Bluetooth: hci7: command tx timeout
[   82.670462] Bluetooth: hci0: command tx timeout
[   82.798843] Bluetooth: hci1: command tx timeout
[   82.799274] Bluetooth: hci2: command tx timeout
[   82.926788] Bluetooth: hci5: command tx timeout
[   82.927232] Bluetooth: hci4: command tx timeout
[   82.927307] Bluetooth: hci6: command tx timeout
[   82.927610] Bluetooth: hci3: command tx timeout
[   82.990840] Bluetooth: hci7: command tx timeout
[   84.718069] Bluetooth: hci0: command tx timeout
[   84.846880] Bluetooth: hci2: command tx timeout
[   84.847643] Bluetooth: hci1: command tx timeout
[   84.973925] Bluetooth: hci6: command tx timeout
[   84.974007] Bluetooth: hci4: command tx timeout
[   84.974378] Bluetooth: hci3: command tx timeout
[   84.975571] Bluetooth: hci5: command tx timeout
[   85.038873] Bluetooth: hci7: command tx timeout
[   86.766877] Bluetooth: hci0: command tx timeout
[   86.893957] Bluetooth: hci1: command tx timeout
[   86.893984] Bluetooth: hci2: command tx timeout
[   87.022201] Bluetooth: hci4: command tx timeout
[   87.022239] Bluetooth: hci3: command tx timeout
[   87.022630] Bluetooth: hci5: command tx timeout
[   87.024326] Bluetooth: hci6: command tx timeout
[   87.086040] Bluetooth: hci7: command tx timeout
[  112.609607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.610310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.789485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.790668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.557232] audit: type=1400 audit(1768294965.694:8): avc:  denied  { open } for  pid=3765 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  113.574954] audit: type=1400 audit(1768294965.694:9): avc:  denied  { kernel } for  pid=3765 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  113.605370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[  113.691717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
09:02:45 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

[  113.877600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[  113.912902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.913540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:46 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

[  114.088752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[  114.130234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.131059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:46 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

[  114.285492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
09:02:46 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

[  114.532436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.533145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.576131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[  114.594955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.595548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:46 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x3b, {@private1}}}], 0x28}, 0x0)

09:02:46 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x3b, {@private1}}}], 0x28}, 0x0)

09:02:46 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x3b, {@private1}}}], 0x28}, 0x0)

[  114.717902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.719033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:46 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

[  114.773246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[  114.947083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.949274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.973038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.973600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.096259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.096846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.322626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.324100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.474414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.476162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.669692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.688859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.749855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.750460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.904987] =======================================================
[  115.904987] WARNING: The mand mount option has been deprecated and
[  115.904987]          and is ignored by this kernel. Remove the mand
[  115.904987]          option from the mount to silence this warning.
[  115.904987] =======================================================
[  115.929888] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
[  115.945496] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
[  116.039283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.040754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.075617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.076787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "968f3f8ed90a2a64ed55a1d6020ef9464cd4c5"})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cf78aa0900dc6c04"})

09:02:48 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:02:48 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

09:02:48 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

09:02:48 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001500)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

09:02:48 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0)

09:02:48 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)

09:02:48 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x5, &(0x7f0000000040)=0x1a, 0x4)

[  116.340361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
09:02:48 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)

[  116.393979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[  116.412942] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
09:02:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "968f3f8ed90a2a64ed55a1d6020ef9464cd4c5"})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cf78aa0900dc6c04"})

09:02:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "968f3f8ed90a2a64ed55a1d6020ef9464cd4c5"})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cf78aa0900dc6c04"})

09:02:48 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0)

09:02:48 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001500)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

09:02:48 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x5, &(0x7f0000000040)=0x1a, 0x4)

09:02:48 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)

09:02:48 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x8}, 0xe)

09:02:48 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

09:02:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "968f3f8ed90a2a64ed55a1d6020ef9464cd4c5"})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cf78aa0900dc6c04"})

09:02:48 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x5, &(0x7f0000000040)=0x1a, 0x4)

[  116.637172] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
09:02:48 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x1, 0x0, 0x4}, 0x20)

09:02:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "968f3f8ed90a2a64ed55a1d6020ef9464cd4c5"})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cf78aa0900dc6c04"})

[  116.711442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
09:02:48 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x1, 0x0, 0x4}, 0x20)

09:02:48 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001500)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

09:02:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "968f3f8ed90a2a64ed55a1d6020ef9464cd4c5"})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cf78aa0900dc6c04"})

09:02:48 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0)

09:02:48 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

09:02:48 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x82})

09:02:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}], 0x1}, 0x0)

[  116.838705] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
09:02:49 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x1, 0x0, 0x4}, 0x20)

09:02:49 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x82})

09:02:49 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x82})

09:02:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}], 0x1}, 0x0)

09:02:49 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x82})

09:02:49 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x82})

09:02:49 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x1, 0x0, 0x4}, 0x20)

09:02:49 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0)

09:02:49 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x8}, 0xe)

09:02:49 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:49 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)

09:02:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}], 0x1}, 0x0)

[  117.469443] loop4: detected capacity change from 0 to 64
[  117.490567] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
09:02:49 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0)

09:02:49 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x82})

09:02:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}], 0x1}, 0x0)

09:02:50 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x82})

09:02:50 executing program 7:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}], 0x1, 0x0)

09:02:50 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)

09:02:50 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:50 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:50 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0)

09:02:50 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:50 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x8}, 0xe)

[  118.390520] loop1: detected capacity change from 0 to 64
[  118.394923] loop0: detected capacity change from 0 to 64
[  118.412147] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
09:02:50 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

[  118.429972] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
09:02:50 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)

[  118.466190] loop3: detected capacity change from 0 to 64
[  118.470473] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
09:02:51 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0)

09:02:51 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:51 executing program 7:
r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x5)
lseek(r0, 0x2, 0x1)

09:02:51 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:51 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:51 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:51 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x8}, 0xe)

09:02:51 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)

09:02:51 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:51 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:51 executing program 7:
r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x5)
lseek(r0, 0x2, 0x1)

09:02:51 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:02:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

09:02:51 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r1=>0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)='u', 0x1}])

09:02:51 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

[  119.447209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.449997] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
09:02:51 executing program 7:
r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x5)
lseek(r0, 0x2, 0x1)

[  119.519384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.520322] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
09:02:52 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='\'[&\\^{!\x00', 0x0, 0x0)

09:02:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

09:02:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

09:02:52 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

09:02:52 executing program 7:
r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x5)
lseek(r0, 0x2, 0x1)

09:02:52 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r1=>0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)='u', 0x1}])

09:02:52 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1260, 0xffffffffffffffff)

09:02:52 executing program 6:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setns(r0, 0x8000000)

09:02:52 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='\'[&\\^{!\x00', 0x0, 0x0)

09:02:52 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='\'[&\\^{!\x00', 0x0, 0x0)

09:02:52 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='\'[&\\^{!\x00', 0x0, 0x0)

09:02:52 executing program 4:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r0, 0x311}, 0x14}}, 0x0)

09:02:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

09:02:52 executing program 3:
r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f0000000300), 0x5)

09:02:52 executing program 6:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setns(r0, 0x8000000)

09:02:52 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0)

09:02:52 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r1=>0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)='u', 0x1}])

09:02:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

09:02:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

09:02:52 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

09:02:52 executing program 4:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r0, 0x311}, 0x14}}, 0x0)

09:02:52 executing program 4:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r0, 0x311}, 0x14}}, 0x0)

[  120.523007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.523512] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
09:02:52 executing program 1:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r0, 0x311}, 0x14}}, 0x0)

09:02:52 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0)

09:02:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

09:02:52 executing program 6:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setns(r0, 0x8000000)

09:02:52 executing program 4:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r0, 0x311}, 0x14}}, 0x0)

09:02:52 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

09:02:52 executing program 3:
r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f0000000300), 0x5)

09:02:52 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0)

09:02:52 executing program 3:
r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f0000000300), 0x5)

09:02:52 executing program 1:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r0, 0x311}, 0x14}}, 0x0)

09:02:52 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r1=>0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)='u', 0x1}])

09:02:52 executing program 6:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setns(r0, 0x8000000)

09:02:52 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1f)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, "28a587ea6b9da511f7ff1315aa908ba6ccc7a9"})
read(r0, 0x0, 0x40004)

09:02:52 executing program 3:
r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f0000000300), 0x5)

[  120.880422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.881548] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
09:02:53 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00')
pread64(r0, &(0x7f00000001c0)=""/159, 0x9f, 0x0)

09:02:53 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0)

09:02:53 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x0)

09:02:53 executing program 2:
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x8)

09:02:53 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x3f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="88c460215988", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 1:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r0, 0x311}, 0x14}}, 0x0)

09:02:53 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

09:02:53 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
r2 = dup(r1)
copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0)

09:02:53 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x3f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="88c460215988", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000740)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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"})

09:02:53 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup2(r0, r1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf, 0x12, r2, 0x0)
sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0)
sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0)
mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x1, 0x8, 0x1)

09:02:53 executing program 7:
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x107c, 0x13, 0x4, 0x70bd26, 0x25dfdbff, {0x1a, 0xfd, 0x14, 0x4, {0x4e20, 0x4e20, [0x2, 0xfe28, 0x4, 0x396e], [0x7, 0x0, 0x7, 0xff], 0x0, [0x2, 0xbb3]}, 0xd417, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "1b024a75cf4640145d9065d04cf5c23af4325e4f15b21d640d5cd568fc3a947bb00946b72f0ffc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x107c}, 0x1, 0x0, 0x0, 0xc000}, 0x1)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r0, &(0x7f0000000240)=[{0x0, 0x2}, {&(0x7f0000000040)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x0)

09:02:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x22, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\x00']}, 0x14}], 0x1}, 0x0)

09:02:53 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00')
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x800448d3, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/25, 0x19}], 0x2, 0x3, 0xe26e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0x6804, 0x0)
close(r6)
sendmsg$netlink(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100001900010000000000000000000a0090007663616e3000000008002400"], 0x113c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)

[  121.265955] __nla_validate_parse: 1 callbacks suppressed
[  121.265971] netlink: 4376 bytes leftover after parsing attributes in process `syz-executor.3'.
09:02:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x22, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\x00']}, 0x14}], 0x1}, 0x0)

09:02:53 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup2(r0, r1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf, 0x12, r2, 0x0)
sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0)
sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0)
mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x1, 0x8, 0x1)

09:02:53 executing program 7:
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x107c, 0x13, 0x4, 0x70bd26, 0x25dfdbff, {0x1a, 0xfd, 0x14, 0x4, {0x4e20, 0x4e20, [0x2, 0xfe28, 0x4, 0x396e], [0x7, 0x0, 0x7, 0xff], 0x0, [0x2, 0xbb3]}, 0xd417, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "1b024a75cf4640145d9065d04cf5c23af4325e4f15b21d640d5cd568fc3a947bb00946b72f0ffc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x107c}, 0x1, 0x0, 0x0, 0xc000}, 0x1)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r0, &(0x7f0000000240)=[{0x0, 0x2}, {&(0x7f0000000040)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x0)

[  121.332919] netlink: 4376 bytes leftover after parsing attributes in process `syz-executor.3'.
09:02:53 executing program 1:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0/file1\x00')

09:02:53 executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
sched_setscheduler(0x0, 0x0, &(0x7f0000000300))

09:02:53 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x3f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="88c460215988", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x22, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\x00']}, 0x14}], 0x1}, 0x0)

09:02:53 executing program 2:
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}]}, 0x24}], 0x10b4}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000040000000a000080"], 0x24}], 0x1}, 0x0)

09:02:53 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x3f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="88c460215988", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 1:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0/file1\x00')

09:02:53 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00')
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x800448d3, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/25, 0x19}], 0x2, 0x3, 0xe26e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0x6804, 0x0)
close(r6)
sendmsg$netlink(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100001900010000000000000000000a0090007663616e3000000008002400"], 0x113c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)

09:02:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x22, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\x00']}, 0x14}], 0x1}, 0x0)

09:02:53 executing program 0:
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

09:02:53 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup2(r0, r1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf, 0x12, r2, 0x0)
sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0)
sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0)
mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x1, 0x8, 0x1)

09:02:53 executing program 7:
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x107c, 0x13, 0x4, 0x70bd26, 0x25dfdbff, {0x1a, 0xfd, 0x14, 0x4, {0x4e20, 0x4e20, [0x2, 0xfe28, 0x4, 0x396e], [0x7, 0x0, 0x7, 0xff], 0x0, [0x2, 0xbb3]}, 0xd417, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "1b024a75cf4640145d9065d04cf5c23af4325e4f15b21d640d5cd568fc3a947bb00946b72f0ffc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x107c}, 0x1, 0x0, 0x0, 0xc000}, 0x1)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r0, &(0x7f0000000240)=[{0x0, 0x2}, {&(0x7f0000000040)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x0)

[  121.572383] netlink: 4376 bytes leftover after parsing attributes in process `syz-executor.3'.
[  121.586019] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
09:02:53 executing program 7:
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x107c, 0x13, 0x4, 0x70bd26, 0x25dfdbff, {0x1a, 0xfd, 0x14, 0x4, {0x4e20, 0x4e20, [0x2, 0xfe28, 0x4, 0x396e], [0x7, 0x0, 0x7, 0xff], 0x0, [0x2, 0xbb3]}, 0xd417, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "1b024a75cf4640145d9065d04cf5c23af4325e4f15b21d640d5cd568fc3a947bb00946b72f0ffc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x107c}, 0x1, 0x0, 0x0, 0xc000}, 0x1)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r0, &(0x7f0000000240)=[{0x0, 0x2}, {&(0x7f0000000040)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x0)

09:02:53 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00')
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x800448d3, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/25, 0x19}], 0x2, 0x3, 0xe26e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0x6804, 0x0)
close(r6)
sendmsg$netlink(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100001900010000000000000000000a0090007663616e3000000008002400"], 0x113c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)

09:02:53 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0xffffff95, "0e"})

09:02:53 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup2(r0, r1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf, 0x12, r2, 0x0)
sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0)
sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0)
mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x1, 0x8, 0x1)

09:02:53 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, r2, 0x8b2b6c1a9bb265cb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}]}, 0x30}}, 0x0)

09:02:53 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, 0x0, 0x4d)

09:02:53 executing program 2:
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}]}, 0x24}], 0x10b4}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000040000000a000080"], 0x24}], 0x1}, 0x0)

[  121.757397] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
09:02:53 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, 0x0, 0x4d)

[  121.770930] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO
09:02:53 executing program 2:
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}]}, 0x24}], 0x10b4}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000040000000a000080"], 0x24}], 0x1}, 0x0)

[  121.779237] ata1.00: non-matching transfer count (0/1)
[  121.802336] netlink: 4376 bytes leftover after parsing attributes in process `syz-executor.3'.
[  121.812327] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
09:02:54 executing program 1:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0/file1\x00')

09:02:54 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, 0x0, 0x4d)

09:02:54 executing program 2:
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}]}, 0x24}], 0x10b4}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000040000000a000080"], 0x24}], 0x1}, 0x0)

09:02:54 executing program 5:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x21, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6)

09:02:54 executing program 4:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3}], 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
fork()
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00))

09:02:54 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0xffffff95, "0e"})

09:02:54 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00')
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x800448d3, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/25, 0x19}], 0x2, 0x3, 0xe26e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0x6804, 0x0)
close(r6)
sendmsg$netlink(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100001900010000000000000000000a0090007663616e3000000008002400"], 0x113c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)

09:02:54 executing program 0:
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

[  121.949856] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.950643] ata1.00: non-matching transfer count (0/1)
[  121.966579] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
09:02:54 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0xffffff95, "0e"})

09:02:54 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$bt_hci(r2, &(0x7f0000000040)={0x1, @sniff_subrate={{0x811, 0x8}}}, 0xc)

[  122.032110] netlink: 4376 bytes leftover after parsing attributes in process `syz-executor.3'.
[  122.086739] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.088382] ata1.00: non-matching transfer count (0/1)
09:02:54 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, 0x0, 0x4d)

09:02:54 executing program 5:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x21, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6)

09:02:54 executing program 0:
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

09:02:54 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$bt_hci(r2, &(0x7f0000000040)={0x1, @sniff_subrate={{0x811, 0x8}}}, 0xc)

09:02:54 executing program 1:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0/file1\x00')

09:02:54 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$bt_hci(r2, &(0x7f0000000040)={0x1, @sniff_subrate={{0x811, 0x8}}}, 0xc)

09:02:54 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0xffffff95, "0e"})

09:02:54 executing program 4:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3}], 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
fork()
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00))

09:02:54 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$bt_hci(r2, &(0x7f0000000040)={0x1, @sniff_subrate={{0x811, 0x8}}}, 0xc)

[  122.254171] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.259409] ata1.00: non-matching transfer count (0/1)
09:02:54 executing program 6:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3}], 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
fork()
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00))

09:02:54 executing program 5:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x21, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6)

09:02:54 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$bt_hci(r2, &(0x7f0000000040)={0x1, @sniff_subrate={{0x811, 0x8}}}, 0xc)

09:02:54 executing program 0:
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

09:02:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x1, &(0x7f0000000180)={@broadcast, @remote}, 0xc)

[  122.520142] loop6: detected capacity change from 0 to 264192
09:02:54 executing program 4:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3}], 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
fork()
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00))

09:02:54 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0189436, &(0x7f0000001480)=ANY=[])

09:02:54 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$bt_hci(r2, &(0x7f0000000040)={0x1, @sniff_subrate={{0x811, 0x8}}}, 0xc)

09:02:54 executing program 6:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3}], 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
fork()
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00))

09:02:54 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='lock io'], 0xc)

09:02:54 executing program 5:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x21, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6)

09:02:54 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$bt_hci(r2, &(0x7f0000000040)={0x1, @sniff_subrate={{0x811, 0x8}}}, 0xc)

09:02:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x1, &(0x7f0000000180)={@broadcast, @remote}, 0xc)

09:02:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x1, &(0x7f0000000180)={@broadcast, @remote}, 0xc)

09:02:54 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, 0x0)

09:02:54 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000080)="ac", 0x1, r0)

09:02:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x44, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x2c, 0x0, 0x0, 0x1, [@typed={0x27, 0x0, 0x0, 0x0, @str='&:\x17\x894\x82\x86\x9a\x13\x8d\xe1k\xe1\xea\xd5\x92g\xeb\xf0\xf0\xa8\xdeS5?4W\x98I\x87@\'\x00\x00\x00'}]}]}, 0x44}], 0x1}, 0x0)

09:02:54 executing program 4:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3}], 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
fork()
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00))

09:02:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x48, 0x0, &(0x7f0000000800))

[  122.832467] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'.
09:02:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x4, 0x7, 0x0)

09:02:55 executing program 2:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
ftruncate(r1, 0xffffffff)

09:02:55 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x1, &(0x7f0000000180)={@broadcast, @remote}, 0xc)

[  123.023269] loop6: detected capacity change from 0 to 264192
09:02:55 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, 0x0)

09:02:55 executing program 6:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3}], 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
fork()
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00))

09:02:55 executing program 2:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
ftruncate(r1, 0xffffffff)

09:02:55 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0)

09:02:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x48, 0x0, &(0x7f0000000800))

09:02:55 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
fallocate(r0, 0x0, 0x0, 0x7)

09:02:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x0, 0x0, 0x0)
r1 = dup2(r0, r0)
mq_notify(r1, 0x0)

09:02:55 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x4, 0x7, 0x0)

09:02:55 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x4, 0x7, 0x0)

09:02:55 executing program 2:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
ftruncate(r1, 0xffffffff)

09:02:55 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x10, 0x3, 0x0, 0x25dfdbfb, "", [@nested={0x4}, @nested={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="ed"]}]}, 0x24}], 0x1}, 0x0)

09:02:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x48, 0x0, &(0x7f0000000800))

[  123.183304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  123.447775] loop6: detected capacity change from 0 to 264192
09:02:55 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x4, 0x7, 0x0)

09:02:55 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, 0x0)

09:02:55 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x10, 0x3, 0x0, 0x25dfdbfb, "", [@nested={0x4}, @nested={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="ed"]}]}, 0x24}], 0x1}, 0x0)

09:02:55 executing program 2:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
ftruncate(r1, 0xffffffff)

09:02:55 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0)

09:02:55 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
fallocate(r0, 0x0, 0x0, 0x7)

09:02:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x48, 0x0, &(0x7f0000000800))

[  123.529034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
09:02:55 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040))

09:02:55 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x10, 0x3, 0x0, 0x25dfdbfb, "", [@nested={0x4}, @nested={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="ed"]}]}, 0x24}], 0x1}, 0x0)

09:02:55 executing program 2:
uname(0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

09:02:55 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0)

09:02:55 executing program 0:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)

09:02:55 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0)

[  123.663154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
09:02:55 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}, {&(0x7f0000000080)="20000000d0fadacd40070100d782383f7310341bbf", 0x15, 0x1680}], 0x0, &(0x7f0000012900))

09:02:55 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x10, 0x3, 0x0, 0x25dfdbfb, "", [@nested={0x4}, @nested={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="ed"]}]}, 0x24}], 0x1}, 0x0)

09:02:55 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
fallocate(r0, 0x0, 0x0, 0x7)

09:02:55 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, 0x0)

[  123.738930] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  123.765351] mmap: syz-executor.0 (4408): VmData 37384192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  123.873950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
09:02:56 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100))

09:02:56 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000003c0)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})

09:02:56 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040))

09:02:56 executing program 0:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)

09:02:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x5, 0x0, &(0x7f00000000c0))

09:02:56 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

09:02:56 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
fallocate(r0, 0x0, 0x0, 0x7)

09:02:56 executing program 7:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff)
io_uring_setup(0x1fca, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, 0xb5})

09:02:56 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:02:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x5, 0x0, &(0x7f00000000c0))

09:02:56 executing program 0:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)

09:02:56 executing program 7:
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:02:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1}, 0x0)

09:02:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x5, 0x0, &(0x7f00000000c0))

09:02:56 executing program 3:
r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

09:02:56 executing program 2:
syslog(0x2, &(0x7f0000000280)=""/220, 0xdc)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)

09:02:56 executing program 0:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)

09:02:56 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100))

09:02:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x5, 0x0, &(0x7f00000000c0))

09:02:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1}, 0x0)

09:02:56 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040))

09:02:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x52, 0x0, &(0x7f00000007c0))

09:02:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0xb, 0x2a, [@challenge={0x10, 0x1}, @perr={0x84, 0x2}]}]}, 0x34}}, 0x0)

09:02:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1}, 0x0)

09:02:57 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040))

09:02:57 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x24}], 0x1}, 0x0)

09:02:57 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100))

09:02:57 executing program 7:
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:02:57 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@v2, 0x14, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)

09:02:57 executing program 7:
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:02:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x52, 0x0, &(0x7f00000007c0))

09:02:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1}, 0x0)

09:02:57 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@v2, 0x14, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)

09:02:57 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00')
lseek(r0, 0x3f, 0x0)

09:02:57 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100))

09:02:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0xb, 0x2a, [@challenge={0x10, 0x1}, @perr={0x84, 0x2}]}]}, 0x34}}, 0x0)

09:02:57 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x24}], 0x1}, 0x0)

09:02:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0xb, 0x2a, [@challenge={0x10, 0x1}, @perr={0x84, 0x2}]}]}, 0x34}}, 0x0)

09:02:57 executing program 7:
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:02:57 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00')
lseek(r0, 0x3f, 0x0)

09:02:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x52, 0x0, &(0x7f00000007c0))

09:02:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000380)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xaa}, @from_mac=@broadcast, @device_b, @broadcast, {0x9, 0x6}}, {0x7, 0x0, 0x0, 0x0, 0x80}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x78d3}, @broadcast, @random="cc720f177d25", @initial, {0x4, 0x9}}, {0xf, 0x1, 0x2, 0x1, 0x3}}}, @a_msdu=[{@device_a, @broadcast, 0x11, "f5c70f437760302f44f6788eac3e1b168e"}, {@broadcast, @broadcast, 0xb4, "6ab15fa496e87a84a7ec705f8c5e5ef6e8ccabd140c74c7a6ff03d95e44debf7ed1f3e01086b14e1e305bc860088624c04ba4f28092d375693409189cc1758a5379447f923348d44430aee09c00885a76d345f93c4575fdac94a09d28cc6e94c1b9357e33cb424bb94361027cc01408a9ae224dc02a3a7901c35066d23e0ded330a5741eaa354caecc444b3a5f7eb22cd1fbc9dba60c5f6e3f1c057e06a9ee96aebd987a339e774abd9074003a5b0306988e6fac"}, {@device_a, @device_a, 0xd, "25877621393100cd8c67228614"}]}, 0x134)

09:02:57 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@v2, 0x14, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)

09:02:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0xb, 0x2a, [@challenge={0x10, 0x1}, @perr={0x84, 0x2}]}]}, 0x34}}, 0x0)

09:02:57 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00')
lseek(r0, 0x3f, 0x0)

[  125.630910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
09:02:57 executing program 5:
keyctl$search(0xa, 0x0, &(0x7f0000000000)='encrypted\x00', 0x0, 0xfffffffffffffffe)

09:02:57 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x24}], 0x1}, 0x0)

09:02:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x52, 0x0, &(0x7f00000007c0))

09:02:57 executing program 7:
r0 = semget$private(0x0, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semtimedop(r0, &(0x7f0000000140)=[{}, {0x0, 0xef8d, 0x1400}], 0x2, &(0x7f00000001c0))

09:02:57 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup(r0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000240))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x8, &(0x7f00000004c0))

09:02:57 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00')
lseek(r0, 0x3f, 0x0)

09:02:57 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000600), &(0x7f0000001e00)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0)

09:02:58 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@v2, 0x14, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)

[  125.896359] audit: type=1400 audit(1768294978.031:10): avc:  denied  { write } for  pid=4529 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  125.986324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
09:02:58 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup(r0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000240))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x8, &(0x7f00000004c0))

09:02:58 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x24}], 0x1}, 0x0)

09:02:58 executing program 7:
r0 = semget$private(0x0, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semtimedop(r0, &(0x7f0000000140)=[{}, {0x0, 0xef8d, 0x1400}], 0x2, &(0x7f00000001c0))

09:02:58 executing program 3:
madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10)
mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000)
mlock2(&(0x7f00008b6000/0x2000)=nil, 0x2000, 0x0)
munmap(&(0x7f0000905000/0x3000)=nil, 0x3000)
munmap(&(0x7f00008b7000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000c68000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

09:02:58 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000004e80), 0x4)

09:02:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000600), &(0x7f0000001e00)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0)

09:02:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000380)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xaa}, @from_mac=@broadcast, @device_b, @broadcast, {0x9, 0x6}}, {0x7, 0x0, 0x0, 0x0, 0x80}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x78d3}, @broadcast, @random="cc720f177d25", @initial, {0x4, 0x9}}, {0xf, 0x1, 0x2, 0x1, 0x3}}}, @a_msdu=[{@device_a, @broadcast, 0x11, "f5c70f437760302f44f6788eac3e1b168e"}, {@broadcast, @broadcast, 0xb4, "6ab15fa496e87a84a7ec705f8c5e5ef6e8ccabd140c74c7a6ff03d95e44debf7ed1f3e01086b14e1e305bc860088624c04ba4f28092d375693409189cc1758a5379447f923348d44430aee09c00885a76d345f93c4575fdac94a09d28cc6e94c1b9357e33cb424bb94361027cc01408a9ae224dc02a3a7901c35066d23e0ded330a5741eaa354caecc444b3a5f7eb22cd1fbc9dba60c5f6e3f1c057e06a9ee96aebd987a339e774abd9074003a5b0306988e6fac"}, {@device_a, @device_a, 0xd, "25877621393100cd8c67228614"}]}, 0x134)

09:02:58 executing program 2:
waitid(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

[  126.181671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
09:02:58 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup(r0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000240))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x8, &(0x7f00000004c0))

09:02:58 executing program 3:
madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10)
mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000)
mlock2(&(0x7f00008b6000/0x2000)=nil, 0x2000, 0x0)
munmap(&(0x7f0000905000/0x3000)=nil, 0x3000)
munmap(&(0x7f00008b7000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000c68000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

09:02:58 executing program 7:
r0 = semget$private(0x0, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semtimedop(r0, &(0x7f0000000140)=[{}, {0x0, 0xef8d, 0x1400}], 0x2, &(0x7f00000001c0))

09:02:58 executing program 2:
waitid(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

[  126.294007] 
[  126.294353] =====================================
[  126.295180] WARNING: bad unlock balance detected!
[  126.295941] 6.19.0-rc5-next-20260113 #1 Not tainted
[  126.296751] -------------------------------------
[  126.297518] syz-executor.3/4560 is trying to release lock (rcu_read_lock) at:
[  126.299081] [<ffffffff81c20365>] __wait_on_freeing_inode+0x105/0x350
[  126.301464] but there are no more locks to release!
[  126.303238] 
[  126.303238] other info that might help us debug this:
[  126.306001] 4 locks held by syz-executor.3/4560:
[  126.307663]  #0: ffff88800f8483f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  126.309038]  #1: ffff888013d1c698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  126.310656]  #2: ffff88800f84c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  126.311991]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  126.313481] 
[  126.313481] stack backtrace:
[  126.314229] CPU: 1 UID: 0 PID: 4560 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  126.314261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  126.314274] Call Trace:
[  126.314282]  <TASK>
[  126.314290]  dump_stack_lvl+0xca/0x120
[  126.314333]  ? __wait_on_freeing_inode+0x105/0x350
[  126.314360]  print_unlock_imbalance_bug+0x118/0x130
[  126.314386]  ? __wait_on_freeing_inode+0x105/0x350
[  126.314413]  lock_release+0x1ee/0x270
[  126.314441]  __wait_on_freeing_inode+0x10a/0x350
[  126.314468]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  126.314498]  ? __pfx_var_wake_function+0x10/0x10
[  126.314530]  ? lock_is_held_type+0x9e/0x120
[  126.314550]  insert_inode_locked+0x25f/0x890
[  126.314582]  __ext4_new_inode+0x223d/0x4cd0
[  126.314614]  ? __pfx___ext4_new_inode+0x10/0x10
[  126.314641]  ? __pfx___dquot_initialize+0x10/0x10
[  126.314674]  ? __pfx_avc_has_perm+0x10/0x10
[  126.314702]  ext4_symlink+0x406/0xb40
[  126.314737]  ? __pfx_ext4_symlink+0x10/0x10
[  126.314767]  ? security_inode_permission+0x72/0xe0
[  126.314790]  vfs_symlink+0x44b/0x840
[  126.314822]  do_symlinkat+0x153/0x440
[  126.314847]  ? __pfx_do_symlinkat+0x10/0x10
[  126.314872]  ? strncpy_from_user+0x21b/0x2f0
[  126.314904]  __x64_sys_symlink+0x79/0xa0
[  126.314929]  do_syscall_64+0xbf/0x420
[  126.314953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.314974] RIP: 0033:0x7f60e9c29427
[  126.314991] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  126.315010] RSP: 002b:00007ffe08874da8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  126.315030] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f60e9c29427
[  126.315044] RDX: 00007ffe08874e87 RSI: 00007f60e9c84019 RDI: 00007ffe08874e70
[  126.315057] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe08874c40
[  126.315069] R10: 00007ffe08874af7 R11: 0000000000000202 R12: 0000000000000001
[  126.315081] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe08874e70
[  126.315100]  </TASK>
[  126.345207] ------------[ cut here ]------------
[  126.347306] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.3/4560
[  126.349092] Modules linked in:
[  126.349756] CPU: 1 UID: 0 PID: 4560 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  126.351467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  126.352925] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  126.354023] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9
[  126.356795] RSP: 0018:ffff888053e979a0 EFLAGS: 00010286
[  126.357770] RAX: 00000000ffffffff RBX: ffff88804a528000 RCX: ffffffff815664c7
[  126.358946] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff88804a5283fc
[  126.360230] RBP: ffff88804a528000 R08: 0000000000000000 R09: fffffbfff0ba6ff4
[  126.361539] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804a528000
[  126.362758] R13: 0000000000000001 R14: ffffffff85c0cc50 R15: ffff888013c5f578
[  126.364073] FS:  000055557e6e7400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000
[  126.365503] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  126.366561] CR2: 00007f60e9ca9543 CR3: 000000000ce41000 CR4: 0000000000350ef0
[  126.367879] Call Trace:
[  126.368344]  <TASK>
[  126.369645]  __wait_on_freeing_inode+0x10f/0x350
[  126.371187]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  126.373781]  ? __pfx_var_wake_function+0x10/0x10
[  126.376432]  ? lock_is_held_type+0x9e/0x120
[  126.378549]  insert_inode_locked+0x25f/0x890
[  126.382086]  __ext4_new_inode+0x223d/0x4cd0
[  126.386649]  ? __pfx___ext4_new_inode+0x10/0x10
[  126.388967]  ? __pfx___dquot_initialize+0x10/0x10
[  126.390347]  ? __pfx_avc_has_perm+0x10/0x10
[  126.393549]  ext4_symlink+0x406/0xb40
[  126.397577]  ? __pfx_ext4_symlink+0x10/0x10
[  126.399406]  ? security_inode_permission+0x72/0xe0
[  126.402329]  vfs_symlink+0x44b/0x840
[  126.404612]  do_symlinkat+0x153/0x440
[  126.406667]  ? __pfx_do_symlinkat+0x10/0x10
[  126.408006]  ? strncpy_from_user+0x21b/0x2f0
[  126.411347]  __x64_sys_symlink+0x79/0xa0
[  126.412644]  do_syscall_64+0xbf/0x420
[  126.414254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.415364] RIP: 0033:0x7f60e9c29427
[  126.416082] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  126.418937] RSP: 002b:00007ffe08874da8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  126.420280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f60e9c29427
[  126.421587] RDX: 00007ffe08874e87 RSI: 00007f60e9c84019 RDI: 00007ffe08874e70
[  126.424548] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe08874c40
[  126.426801] R10: 00007ffe08874af7 R11: 0000000000000202 R12: 0000000000000001
[  126.427953] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe08874e70
[  126.432601]  </TASK>
[  126.433032] irq event stamp: 161
[  126.433530] hardirqs last  enabled at (161): [<ffffffff84ce830b>] irqentry_exit+0x17b/0x650
[  126.434902] hardirqs last disabled at (160): [<ffffffff84ce700f>] sysvec_apic_timer_interrupt+0xf/0x80
[  126.436468] softirqs last  enabled at (154): [<ffffffff812cdb99>] kernel_fpu_end+0x59/0x70
[  126.437908] softirqs last disabled at (152): [<ffffffff812cea6b>] kernel_fpu_begin_mask+0x1bb/0x300
[  126.439539] ---[ end trace 0000000000000000 ]---
09:02:58 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000004e80), 0x4)

09:02:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000004e80), 0x4)

09:02:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000600), &(0x7f0000001e00)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0)

09:02:58 executing program 2:
waitid(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

09:02:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000004e80), 0x4)

09:02:58 executing program 3:
madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10)
mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000)
mlock2(&(0x7f00008b6000/0x2000)=nil, 0x2000, 0x0)
munmap(&(0x7f0000905000/0x3000)=nil, 0x3000)
munmap(&(0x7f00008b7000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000c68000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

09:02:58 executing program 7:
r0 = semget$private(0x0, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semtimedop(r0, &(0x7f0000000140)=[{}, {0x0, 0xef8d, 0x1400}], 0x2, &(0x7f00000001c0))

09:02:58 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000004e80), 0x4)

09:02:58 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup(r0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000240))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x8, &(0x7f00000004c0))

09:02:58 executing program 7:
keyctl$set_timeout(0xf, 0x0, 0x0)

09:02:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000380)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xaa}, @from_mac=@broadcast, @device_b, @broadcast, {0x9, 0x6}}, {0x7, 0x0, 0x0, 0x0, 0x80}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x78d3}, @broadcast, @random="cc720f177d25", @initial, {0x4, 0x9}}, {0xf, 0x1, 0x2, 0x1, 0x3}}}, @a_msdu=[{@device_a, @broadcast, 0x11, "f5c70f437760302f44f6788eac3e1b168e"}, {@broadcast, @broadcast, 0xb4, "6ab15fa496e87a84a7ec705f8c5e5ef6e8ccabd140c74c7a6ff03d95e44debf7ed1f3e01086b14e1e305bc860088624c04ba4f28092d375693409189cc1758a5379447f923348d44430aee09c00885a76d345f93c4575fdac94a09d28cc6e94c1b9357e33cb424bb94361027cc01408a9ae224dc02a3a7901c35066d23e0ded330a5741eaa354caecc444b3a5f7eb22cd1fbc9dba60c5f6e3f1c057e06a9ee96aebd987a339e774abd9074003a5b0306988e6fac"}, {@device_a, @device_a, 0xd, "25877621393100cd8c67228614"}]}, 0x134)

09:02:58 executing program 2:
waitid(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

09:02:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000004e80), 0x4)

09:02:58 executing program 3:
madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10)
mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000)
mlock2(&(0x7f00008b6000/0x2000)=nil, 0x2000, 0x0)
munmap(&(0x7f0000905000/0x3000)=nil, 0x3000)
munmap(&(0x7f00008b7000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000c68000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

09:02:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000600), &(0x7f0000001e00)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0)

09:02:58 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000004e80), 0x4)

09:02:58 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x102000, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  126.850348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
09:02:59 executing program 2:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0)
read(r0, 0x0, 0x0)

09:02:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)

09:02:59 executing program 7:
keyctl$set_timeout(0xf, 0x0, 0x0)

09:02:59 executing program 2:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0)
read(r0, 0x0, 0x0)

09:02:59 executing program 1:
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
symlinkat(&(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000200)='./file0\x00')
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)

09:02:59 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0)

09:02:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2800000064000502", @ANYRES64, @ANYRES64], 0x28}], 0x1}, 0x0)

09:02:59 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)

[  127.012863] __nla_validate_parse: 4 callbacks suppressed
[  127.012883] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'.
[  127.020709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  127.024733] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht'
09:02:59 executing program 7:
keyctl$set_timeout(0xf, 0x0, 0x0)

[  127.072865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  127.171198] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'.
[  127.180551] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht'
[  127.199108] syz-executor.6 (4613) used greatest stack depth: 23864 bytes left
09:02:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000380)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xaa}, @from_mac=@broadcast, @device_b, @broadcast, {0x9, 0x6}}, {0x7, 0x0, 0x0, 0x0, 0x80}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x78d3}, @broadcast, @random="cc720f177d25", @initial, {0x4, 0x9}}, {0xf, 0x1, 0x2, 0x1, 0x3}}}, @a_msdu=[{@device_a, @broadcast, 0x11, "f5c70f437760302f44f6788eac3e1b168e"}, {@broadcast, @broadcast, 0xb4, "6ab15fa496e87a84a7ec705f8c5e5ef6e8ccabd140c74c7a6ff03d95e44debf7ed1f3e01086b14e1e305bc860088624c04ba4f28092d375693409189cc1758a5379447f923348d44430aee09c00885a76d345f93c4575fdac94a09d28cc6e94c1b9357e33cb424bb94361027cc01408a9ae224dc02a3a7901c35066d23e0ded330a5741eaa354caecc444b3a5f7eb22cd1fbc9dba60c5f6e3f1c057e06a9ee96aebd987a339e774abd9074003a5b0306988e6fac"}, {@device_a, @device_a, 0xd, "25877621393100cd8c67228614"}]}, 0x134)

09:02:59 executing program 1:
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
symlinkat(&(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000200)='./file0\x00')
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)

09:02:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)

09:02:59 executing program 2:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0)
read(r0, 0x0, 0x0)

09:02:59 executing program 7:
keyctl$set_timeout(0xf, 0x0, 0x0)

09:02:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2800000064000502", @ANYRES64, @ANYRES64], 0x28}], 0x1}, 0x0)

09:02:59 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)

09:02:59 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0)

[  127.292429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  127.298238] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'.
[  127.308383] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
09:02:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)

09:02:59 executing program 1:
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
symlinkat(&(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000200)='./file0\x00')
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  127.363578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
09:02:59 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)

09:02:59 executing program 2:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0)
read(r0, 0x0, 0x0)

09:02:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)

09:02:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2800000064000502", @ANYRES64, @ANYRES64], 0x28}], 0x1}, 0x0)

09:02:59 executing program 7:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4)

[  127.458439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
09:02:59 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)

09:02:59 executing program 1:
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
symlinkat(&(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000200)='./file0\x00')
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)

09:02:59 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

09:02:59 executing program 7:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4)

09:02:59 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
r1 = dup(r0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:02:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2800000064000502", @ANYRES64, @ANYRES64], 0x28}], 0x1}, 0x0)

09:02:59 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0)

09:02:59 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

[  127.749670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  127.752702] loop5: detected capacity change from 0 to 512
[  127.774529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.790148] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'.
[  127.811098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.821697] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht'
09:03:00 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0)

09:03:00 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x23)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000002c0)=0xfff, 0x4)
sendto$inet(r0, &(0x7f0000000000)="22164198", 0x4, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:03:00 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

09:03:00 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

09:03:00 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPKT(r0, 0x80045439, &(0x7f0000004040))

09:03:00 executing program 7:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4)

09:03:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
r1 = dup(r0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

[  127.970933] loop5: detected capacity change from 0 to 512
[  127.978204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'.
[  127.987429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.000673] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'
09:03:00 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x23)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000002c0)=0xfff, 0x4)
sendto$inet(r0, &(0x7f0000000000)="22164198", 0x4, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:03:00 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

09:03:00 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe)

[  128.023624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:03:00 executing program 7:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4)

09:03:00 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x23)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000002c0)=0xfff, 0x4)
sendto$inet(r0, &(0x7f0000000000)="22164198", 0x4, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:03:00 executing program 4:
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000280)={[{@fat=@dos1xfloppy}]})

09:03:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
r1 = dup(r0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:03:00 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58)

09:03:00 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

09:03:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000200)=0xffff117f, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000001c0))

09:03:00 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

09:03:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
r1 = dup(r0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:03:00 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
fork()
clone(0x0, 0x0, 0x0, 0x0, 0x0)

09:03:00 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x23)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000002c0)=0xfff, 0x4)
sendto$inet(r0, &(0x7f0000000000)="22164198", 0x4, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  128.235447] loop5: detected capacity change from 0 to 512
09:03:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000200)=0xffff117f, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000001c0))

09:03:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000200)=0xffff117f, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000001c0))

[  128.301980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
09:03:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000200)=0xffff117f, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000001c0))

[  128.374032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:03:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x1000000, @mcast1}}}, 0x108)

09:03:00 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

09:03:00 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000200)=0xffff117f, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000001c0))

09:03:00 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0)

[  128.431989] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
09:03:00 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000200)=0xffff117f, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000001c0))

09:03:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x1000000, @mcast1}}}, 0x108)

09:03:00 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58)

09:03:00 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14)

[  128.540487] ieee802154 phy0 wpan0: encryption failed: -22
09:03:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x204200}, 0xc)

09:03:00 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000200)=0xffff117f, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000001c0))

09:03:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x1000000, @mcast1}}}, 0x108)

09:03:00 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
fork()
clone(0x0, 0x0, 0x0, 0x0, 0x0)

09:03:00 executing program 5:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000c12000/0x2000)=nil, 0x6000)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0)
syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xd)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x1}, {0x4, 0x0, 0x419}}}, 0x7)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0)
syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="321363f43dc6d3e0f3b9cf06fc87f323248c2b57e070ac26f9a26255b1cad8655e6f0112cb15146e2824d010713cd699c9be57de231a4f814b5b814ed6dcd4e7122023ea8c41f666b6ded65d924eaaaaa749c14580a64b88b6d9bb4b677771e5628601d8d0c61bf3f3b34ab38ec0a9594000f677d8b34c20806bda7217c2996ca5ced11f8b8a9ba2eac472c4787f8162d240db8b45072a51252fa7da38cd717bd180df7cee076d6044af8f7eabe38198316e1385764ce9b81d05"], 0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300))
getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b)
syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x7, 0xa}, {0x100, 0x0, 0xffde, 0x0, [0x9]}}}}, 0x17)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42c2a170ff7a3ff9cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f60ff1af1764a3c73bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab77cc58ec5e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c73ffec5f4c14224e8e6f4a6ef72c4aca60afc8b8f874b193e783c873c20c31b619fe38639af5618e13fc549dd729b43"], 0x8b)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"])
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f418a58e37bbcc39a405b7b7d4d1bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf)
clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0)

09:03:00 executing program 4:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x1000000, @mcast1}}}, 0x108)

09:03:00 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14)

09:03:00 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58)

09:03:00 executing program 6:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
fork()
clone(0x0, 0x0, 0x0, 0x0, 0x0)

[  128.781238] Bluetooth: unknown link type 6
[  128.782042] Bluetooth: hci5: connection err: -111
[  128.783065] ieee802154 phy0 wpan0: encryption failed: -22
[  128.793385] Bluetooth: Unexpected continuation frame (len 16)
[  128.798905] Bluetooth: unknown link type 6
[  128.799546] Bluetooth: hci5: connection err: -111
[  128.800478] Bluetooth: Unexpected start frame (len 10)
09:03:00 executing program 4:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:00 executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:01 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:01 executing program 3:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:01 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:01 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14)

09:03:01 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
fork()
clone(0x0, 0x0, 0x0, 0x0, 0x0)

09:03:01 executing program 6:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
fork()
clone(0x0, 0x0, 0x0, 0x0, 0x0)

09:03:01 executing program 3:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:01 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58)

09:03:01 executing program 4:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:01 executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:01 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

[  129.207621] ieee802154 phy0 wpan0: encryption failed: -22
09:03:01 executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:01 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
fork()
clone(0x0, 0x0, 0x0, 0x0, 0x0)

09:03:01 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:01 executing program 3:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

09:03:01 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14)

09:03:01 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7fff, 0x10, 0x20, 0x5}, {0xc6da, 0x6, 0xff, 0xfff}, {0x7f, 0x4, 0xfd, 0x1000}, {0x3, 0x6, 0x1, 0x7fff}, {0x1, 0xaf, 0x20, 0x337ac54f}]})
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r2=>0xffffffffffffffff, 0x8, 0xb0, 0x9})
r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
poll(&(0x7f0000000200)=[{r1, 0x4000}, {r3, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = getpid()
r6 = pidfd_open(r5, 0x0)
copy_file_range(r6, 0x0, r4, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={<r7=>0x0})
r8 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x2, r8, 0xa0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r7, 0x0, r0, 0x7, 0x80000})

09:03:01 executing program 4:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
shmctl$IPC_RMID(r0, 0x0)
setresuid(0x0, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000018000000000000000296c491c8b64a5ff38a971d4798e7856f4d35cdca54fd6b63265b036a72c87eb408ec66dd01f0be704f3d213c042fc0f319a6a398ab5f10369b90d461770d19c42b5b776d95ce9d5c949cf3f601b58a28e432826d75dd0ca452", @ANYRES32, @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB="00f37ddcd8a62240"])
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000})
r6 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r7 = fork()
tkill(r7, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0xee01, 0xee00, 0x0, 0xee01, 0x2}, 0x0, 0x0, 0x0, 0x0, r7})
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/227)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

[  129.444074] ieee802154 phy0 wpan0: encryption failed: -22
[  129.571281] syz-executor.1 (284) used greatest stack depth: 23776 bytes left
[  132.147227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.148909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.150373] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.152984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.154700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.212151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  132.213673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  132.216276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  132.224171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  132.230988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  132.244588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  132.244683] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  132.252617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  132.256995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  132.261638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  132.263167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  132.267253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  132.273154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  132.275392] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  132.280897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  134.189903] Bluetooth: hci0: command tx timeout
[  134.254892] Bluetooth: hci1: command tx timeout
[  134.318909] Bluetooth: hci5: command tx timeout
[  134.319578] Bluetooth: hci3: command tx timeout
[  136.238455] Bluetooth: hci0: command tx timeout
[  136.301868] Bluetooth: hci1: command tx timeout

VM DIAGNOSIS:
09:02:58  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801ba5f950
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff1100374bf2b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801ba5f988
RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055556b495400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc0bdf8c545 CR3=000000001fde9000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff888053e97488
R8 =0000000000000000 R9 =ffffed10016a2046 R10=0000000000000020 R11=000000006f6c2034
R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30
RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055557e6e7400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe6a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f60e9ca9543 CR3=000000000ce41000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000