Warning: Permanently added '[localhost]:16418' (ECDSA) to the list of known hosts. 2026/01/14 09:08:45 fuzzer started 2026/01/14 09:08:46 dialing manager at localhost:46753 syzkaller login: [ 50.943862] cgroup: Unknown subsys name 'net' [ 51.009761] cgroup: Unknown subsys name 'cpuset' [ 51.026631] cgroup: Unknown subsys name 'rlimit' 2026/01/14 09:08:56 syscalls: 2214 2026/01/14 09:08:56 code coverage: enabled 2026/01/14 09:08:56 comparison tracing: enabled 2026/01/14 09:08:56 extra coverage: enabled 2026/01/14 09:08:56 setuid sandbox: enabled 2026/01/14 09:08:56 namespace sandbox: enabled 2026/01/14 09:08:56 Android sandbox: enabled 2026/01/14 09:08:56 fault injection: enabled 2026/01/14 09:08:56 leak checking: enabled 2026/01/14 09:08:56 net packet injection: enabled 2026/01/14 09:08:56 net device setup: enabled 2026/01/14 09:08:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/14 09:08:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/14 09:08:56 USB emulation: enabled 2026/01/14 09:08:56 hci packet injection: enabled 2026/01/14 09:08:56 wifi device emulation: enabled 2026/01/14 09:08:56 802.15.4 emulation: enabled 2026/01/14 09:08:56 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/14 09:08:56 fetching corpus: 50, signal 26114/29625 (executing program) 2026/01/14 09:08:56 fetching corpus: 100, signal 35034/40037 (executing program) 2026/01/14 09:08:57 fetching corpus: 150, signal 46518/52779 (executing program) 2026/01/14 09:08:57 fetching corpus: 200, signal 53071/60613 (executing program) 2026/01/14 09:08:57 fetching corpus: 250, signal 56759/65595 (executing program) 2026/01/14 09:08:57 fetching corpus: 300, signal 63285/73200 (executing program) 2026/01/14 09:08:57 fetching corpus: 350, signal 67354/78417 (executing program) 2026/01/14 09:08:57 fetching corpus: 400, signal 70950/83081 (executing program) 2026/01/14 09:08:57 fetching corpus: 450, signal 73807/87062 (executing program) 2026/01/14 09:08:57 fetching corpus: 500, signal 76583/90881 (executing program) 2026/01/14 09:08:57 fetching corpus: 550, signal 80544/95716 (executing program) 2026/01/14 09:08:58 fetching corpus: 600, signal 82609/98812 (executing program) 2026/01/14 09:08:58 fetching corpus: 650, signal 86330/103350 (executing program) 2026/01/14 09:08:58 fetching corpus: 700, signal 87596/105688 (executing program) 2026/01/14 09:08:58 fetching corpus: 750, signal 91913/110600 (executing program) 2026/01/14 09:08:58 fetching corpus: 800, signal 93807/113375 (executing program) 2026/01/14 09:08:58 fetching corpus: 850, signal 95505/115991 (executing program) 2026/01/14 09:08:58 fetching corpus: 900, signal 97508/118790 (executing program) 2026/01/14 09:08:58 fetching corpus: 950, signal 100546/122411 (executing program) 2026/01/14 09:08:58 fetching corpus: 1000, signal 102530/125129 (executing program) 2026/01/14 09:08:58 fetching corpus: 1050, signal 104474/127780 (executing program) 2026/01/14 09:08:59 fetching corpus: 1100, signal 107429/131187 (executing program) 2026/01/14 09:08:59 fetching corpus: 1150, signal 109472/133793 (executing program) 2026/01/14 09:08:59 fetching corpus: 1200, signal 111935/136711 (executing program) 2026/01/14 09:08:59 fetching corpus: 1250, signal 113377/138804 (executing program) 2026/01/14 09:08:59 fetching corpus: 1300, signal 114950/140982 (executing program) 2026/01/14 09:08:59 fetching corpus: 1350, signal 117070/143505 (executing program) 2026/01/14 09:08:59 fetching corpus: 1400, signal 119181/145990 (executing program) 2026/01/14 09:08:59 fetching corpus: 1450, signal 120353/147764 (executing program) 2026/01/14 09:09:00 fetching corpus: 1500, signal 121992/149842 (executing program) 2026/01/14 09:09:00 fetching corpus: 1550, signal 123556/151857 (executing program) 2026/01/14 09:09:00 fetching corpus: 1600, signal 125046/153745 (executing program) 2026/01/14 09:09:00 fetching corpus: 1650, signal 126489/155652 (executing program) 2026/01/14 09:09:00 fetching corpus: 1700, signal 127603/157264 (executing program) 2026/01/14 09:09:00 fetching corpus: 1750, signal 128501/158735 (executing program) 2026/01/14 09:09:00 fetching corpus: 1800, signal 130449/160851 (executing program) 2026/01/14 09:09:00 fetching corpus: 1850, signal 131364/162278 (executing program) 2026/01/14 09:09:00 fetching corpus: 1900, signal 132544/163865 (executing program) 2026/01/14 09:09:00 fetching corpus: 1950, signal 134109/165648 (executing program) 2026/01/14 09:09:01 fetching corpus: 2000, signal 135231/167152 (executing program) 2026/01/14 09:09:01 fetching corpus: 2050, signal 136118/168464 (executing program) 2026/01/14 09:09:01 fetching corpus: 2100, signal 137072/169796 (executing program) 2026/01/14 09:09:01 fetching corpus: 2150, signal 138002/171109 (executing program) 2026/01/14 09:09:01 fetching corpus: 2200, signal 139153/172541 (executing program) 2026/01/14 09:09:01 fetching corpus: 2250, signal 140394/174039 (executing program) 2026/01/14 09:09:01 fetching corpus: 2300, signal 141367/175307 (executing program) 2026/01/14 09:09:01 fetching corpus: 2350, signal 142195/176473 (executing program) 2026/01/14 09:09:01 fetching corpus: 2400, signal 143372/177849 (executing program) 2026/01/14 09:09:02 fetching corpus: 2450, signal 144266/179071 (executing program) 2026/01/14 09:09:02 fetching corpus: 2500, signal 144884/180140 (executing program) 2026/01/14 09:09:02 fetching corpus: 2550, signal 145499/181190 (executing program) 2026/01/14 09:09:02 fetching corpus: 2600, signal 146205/182232 (executing program) 2026/01/14 09:09:02 fetching corpus: 2650, signal 147075/183362 (executing program) 2026/01/14 09:09:02 fetching corpus: 2700, signal 147725/184379 (executing program) 2026/01/14 09:09:02 fetching corpus: 2750, signal 148502/185420 (executing program) 2026/01/14 09:09:02 fetching corpus: 2800, signal 149554/186570 (executing program) 2026/01/14 09:09:03 fetching corpus: 2850, signal 150257/187571 (executing program) 2026/01/14 09:09:03 fetching corpus: 2900, signal 150949/188539 (executing program) 2026/01/14 09:09:03 fetching corpus: 2950, signal 151625/189484 (executing program) 2026/01/14 09:09:03 fetching corpus: 3000, signal 152331/190427 (executing program) 2026/01/14 09:09:03 fetching corpus: 3050, signal 153051/191386 (executing program) 2026/01/14 09:09:03 fetching corpus: 3100, signal 153639/192245 (executing program) 2026/01/14 09:09:03 fetching corpus: 3150, signal 154300/193178 (executing program) 2026/01/14 09:09:03 fetching corpus: 3200, signal 155029/194089 (executing program) 2026/01/14 09:09:03 fetching corpus: 3250, signal 155532/194908 (executing program) 2026/01/14 09:09:03 fetching corpus: 3300, signal 156103/195744 (executing program) 2026/01/14 09:09:04 fetching corpus: 3350, signal 156922/196645 (executing program) 2026/01/14 09:09:04 fetching corpus: 3400, signal 157913/197642 (executing program) 2026/01/14 09:09:04 fetching corpus: 3450, signal 158702/198488 (executing program) 2026/01/14 09:09:04 fetching corpus: 3500, signal 159471/199329 (executing program) 2026/01/14 09:09:04 fetching corpus: 3550, signal 159987/200054 (executing program) 2026/01/14 09:09:04 fetching corpus: 3600, signal 160691/200857 (executing program) 2026/01/14 09:09:04 fetching corpus: 3650, signal 161439/201676 (executing program) 2026/01/14 09:09:04 fetching corpus: 3700, signal 162574/202591 (executing program) 2026/01/14 09:09:04 fetching corpus: 3750, signal 163208/203346 (executing program) 2026/01/14 09:09:05 fetching corpus: 3800, signal 163748/204067 (executing program) 2026/01/14 09:09:05 fetching corpus: 3850, signal 164361/204763 (executing program) 2026/01/14 09:09:05 fetching corpus: 3900, signal 164846/205413 (executing program) 2026/01/14 09:09:05 fetching corpus: 3950, signal 165319/206068 (executing program) 2026/01/14 09:09:05 fetching corpus: 4000, signal 165924/206734 (executing program) 2026/01/14 09:09:05 fetching corpus: 4050, signal 166560/207362 (executing program) 2026/01/14 09:09:05 fetching corpus: 4100, signal 167088/207976 (executing program) 2026/01/14 09:09:05 fetching corpus: 4150, signal 167504/208562 (executing program) 2026/01/14 09:09:05 fetching corpus: 4200, signal 168057/209177 (executing program) 2026/01/14 09:09:05 fetching corpus: 4250, signal 168795/209807 (executing program) 2026/01/14 09:09:06 fetching corpus: 4300, signal 169336/210365 (executing program) 2026/01/14 09:09:06 fetching corpus: 4350, signal 169692/210947 (executing program) 2026/01/14 09:09:06 fetching corpus: 4400, signal 170520/211581 (executing program) 2026/01/14 09:09:06 fetching corpus: 4450, signal 171251/212148 (executing program) 2026/01/14 09:09:06 fetching corpus: 4500, signal 171613/212676 (executing program) 2026/01/14 09:09:06 fetching corpus: 4550, signal 172312/213260 (executing program) 2026/01/14 09:09:06 fetching corpus: 4600, signal 173040/213825 (executing program) 2026/01/14 09:09:06 fetching corpus: 4650, signal 173390/214322 (executing program) 2026/01/14 09:09:06 fetching corpus: 4700, signal 173851/214849 (executing program) 2026/01/14 09:09:07 fetching corpus: 4750, signal 174357/215368 (executing program) 2026/01/14 09:09:07 fetching corpus: 4800, signal 174987/215897 (executing program) 2026/01/14 09:09:07 fetching corpus: 4850, signal 175414/216357 (executing program) 2026/01/14 09:09:07 fetching corpus: 4900, signal 175910/216811 (executing program) 2026/01/14 09:09:07 fetching corpus: 4950, signal 176397/217280 (executing program) 2026/01/14 09:09:07 fetching corpus: 5000, signal 176855/217737 (executing program) 2026/01/14 09:09:07 fetching corpus: 5050, signal 177248/218181 (executing program) 2026/01/14 09:09:07 fetching corpus: 5100, signal 178474/218646 (executing program) 2026/01/14 09:09:08 fetching corpus: 5150, signal 179120/219102 (executing program) 2026/01/14 09:09:08 fetching corpus: 5200, signal 179605/219531 (executing program) 2026/01/14 09:09:08 fetching corpus: 5250, signal 180015/219927 (executing program) 2026/01/14 09:09:08 fetching corpus: 5300, signal 180494/220287 (executing program) 2026/01/14 09:09:08 fetching corpus: 5350, signal 180967/220704 (executing program) 2026/01/14 09:09:08 fetching corpus: 5400, signal 181384/221100 (executing program) 2026/01/14 09:09:08 fetching corpus: 5450, signal 181773/221500 (executing program) 2026/01/14 09:09:08 fetching corpus: 5500, signal 182283/221756 (executing program) 2026/01/14 09:09:09 fetching corpus: 5550, signal 182574/221757 (executing program) 2026/01/14 09:09:09 fetching corpus: 5600, signal 182944/221758 (executing program) 2026/01/14 09:09:09 fetching corpus: 5650, signal 183683/221758 (executing program) 2026/01/14 09:09:09 fetching corpus: 5700, signal 184121/221758 (executing program) 2026/01/14 09:09:09 fetching corpus: 5750, signal 184554/221758 (executing program) 2026/01/14 09:09:09 fetching corpus: 5800, signal 185047/221758 (executing program) 2026/01/14 09:09:09 fetching corpus: 5850, signal 185430/221758 (executing program) 2026/01/14 09:09:09 fetching corpus: 5900, signal 185817/221758 (executing program) 2026/01/14 09:09:10 fetching corpus: 5950, signal 186185/221758 (executing program) 2026/01/14 09:09:10 fetching corpus: 6000, signal 186582/221758 (executing program) 2026/01/14 09:09:10 fetching corpus: 6050, signal 186983/221759 (executing program) 2026/01/14 09:09:10 fetching corpus: 6100, signal 187248/221759 (executing program) 2026/01/14 09:09:10 fetching corpus: 6150, signal 187639/221759 (executing program) 2026/01/14 09:09:10 fetching corpus: 6200, signal 188153/221759 (executing program) 2026/01/14 09:09:10 fetching corpus: 6250, signal 188508/221764 (executing program) 2026/01/14 09:09:10 fetching corpus: 6300, signal 188957/221765 (executing program) 2026/01/14 09:09:10 fetching corpus: 6350, signal 189295/221765 (executing program) 2026/01/14 09:09:10 fetching corpus: 6400, signal 189635/221765 (executing program) 2026/01/14 09:09:11 fetching corpus: 6450, signal 189963/221765 (executing program) 2026/01/14 09:09:11 fetching corpus: 6500, signal 190374/221765 (executing program) 2026/01/14 09:09:11 fetching corpus: 6550, signal 190802/221766 (executing program) 2026/01/14 09:09:11 fetching corpus: 6600, signal 191167/221766 (executing program) 2026/01/14 09:09:11 fetching corpus: 6650, signal 191594/221766 (executing program) 2026/01/14 09:09:11 fetching corpus: 6700, signal 191809/221766 (executing program) 2026/01/14 09:09:11 fetching corpus: 6750, signal 192240/221769 (executing program) 2026/01/14 09:09:11 fetching corpus: 6800, signal 192604/221769 (executing program) 2026/01/14 09:09:11 fetching corpus: 6850, signal 192941/221773 (executing program) 2026/01/14 09:09:11 fetching corpus: 6900, signal 193282/221773 (executing program) 2026/01/14 09:09:12 fetching corpus: 6950, signal 193595/221773 (executing program) 2026/01/14 09:09:12 fetching corpus: 7000, signal 193927/221773 (executing program) 2026/01/14 09:09:12 fetching corpus: 7050, signal 194241/221773 (executing program) 2026/01/14 09:09:12 fetching corpus: 7100, signal 194538/221778 (executing program) 2026/01/14 09:09:12 fetching corpus: 7150, signal 195057/221778 (executing program) 2026/01/14 09:09:12 fetching corpus: 7200, signal 195388/221778 (executing program) 2026/01/14 09:09:12 fetching corpus: 7250, signal 195697/221778 (executing program) 2026/01/14 09:09:12 fetching corpus: 7300, signal 196117/221778 (executing program) 2026/01/14 09:09:13 fetching corpus: 7350, signal 196453/221778 (executing program) 2026/01/14 09:09:13 fetching corpus: 7400, signal 196709/221778 (executing program) 2026/01/14 09:09:13 fetching corpus: 7450, signal 197032/221783 (executing program) 2026/01/14 09:09:13 fetching corpus: 7500, signal 197612/221783 (executing program) 2026/01/14 09:09:13 fetching corpus: 7550, signal 198005/221787 (executing program) 2026/01/14 09:09:13 fetching corpus: 7600, signal 198310/221787 (executing program) 2026/01/14 09:09:13 fetching corpus: 7650, signal 198705/221789 (executing program) 2026/01/14 09:09:13 fetching corpus: 7700, signal 199156/221789 (executing program) 2026/01/14 09:09:14 fetching corpus: 7750, signal 199572/221791 (executing program) 2026/01/14 09:09:14 fetching corpus: 7800, signal 199854/221791 (executing program) 2026/01/14 09:09:14 fetching corpus: 7850, signal 200152/221791 (executing program) 2026/01/14 09:09:14 fetching corpus: 7900, signal 200465/221791 (executing program) 2026/01/14 09:09:14 fetching corpus: 7950, signal 200886/221793 (executing program) 2026/01/14 09:09:14 fetching corpus: 8000, signal 201184/221796 (executing program) 2026/01/14 09:09:14 fetching corpus: 8050, signal 201591/221801 (executing program) 2026/01/14 09:09:14 fetching corpus: 8100, signal 201897/221801 (executing program) 2026/01/14 09:09:14 fetching corpus: 8150, signal 202343/221801 (executing program) 2026/01/14 09:09:15 fetching corpus: 8200, signal 202581/221801 (executing program) 2026/01/14 09:09:15 fetching corpus: 8250, signal 202865/221801 (executing program) 2026/01/14 09:09:15 fetching corpus: 8300, signal 203167/221801 (executing program) 2026/01/14 09:09:15 fetching corpus: 8350, signal 203469/221818 (executing program) 2026/01/14 09:09:15 fetching corpus: 8400, signal 203708/221818 (executing program) 2026/01/14 09:09:15 fetching corpus: 8450, signal 204023/221818 (executing program) 2026/01/14 09:09:15 fetching corpus: 8500, signal 204300/221818 (executing program) 2026/01/14 09:09:15 fetching corpus: 8550, signal 204584/221818 (executing program) 2026/01/14 09:09:15 fetching corpus: 8600, signal 204787/221818 (executing program) 2026/01/14 09:09:15 fetching corpus: 8650, signal 205212/221818 (executing program) 2026/01/14 09:09:15 fetching corpus: 8700, signal 205423/221818 (executing program) 2026/01/14 09:09:16 fetching corpus: 8750, signal 205668/221818 (executing program) 2026/01/14 09:09:16 fetching corpus: 8800, signal 205859/221818 (executing program) 2026/01/14 09:09:16 fetching corpus: 8850, signal 206198/221818 (executing program) 2026/01/14 09:09:16 fetching corpus: 8900, signal 206451/221818 (executing program) 2026/01/14 09:09:16 fetching corpus: 8950, signal 206725/221819 (executing program) 2026/01/14 09:09:16 fetching corpus: 9000, signal 206949/221819 (executing program) 2026/01/14 09:09:16 fetching corpus: 9050, signal 207193/221819 (executing program) 2026/01/14 09:09:16 fetching corpus: 9100, signal 207460/221819 (executing program) 2026/01/14 09:09:16 fetching corpus: 9150, signal 207739/221819 (executing program) 2026/01/14 09:09:16 fetching corpus: 9200, signal 208010/221819 (executing program) 2026/01/14 09:09:16 fetching corpus: 9250, signal 208299/221819 (executing program) 2026/01/14 09:09:17 fetching corpus: 9300, signal 208579/221819 (executing program) 2026/01/14 09:09:17 fetching corpus: 9350, signal 208995/221819 (executing program) 2026/01/14 09:09:17 fetching corpus: 9400, signal 209322/221821 (executing program) 2026/01/14 09:09:17 fetching corpus: 9450, signal 209604/221821 (executing program) 2026/01/14 09:09:17 fetching corpus: 9500, signal 209863/221822 (executing program) 2026/01/14 09:09:17 fetching corpus: 9550, signal 210084/221843 (executing program) 2026/01/14 09:09:17 fetching corpus: 9600, signal 210387/221846 (executing program) 2026/01/14 09:09:17 fetching corpus: 9650, signal 210659/221851 (executing program) 2026/01/14 09:09:17 fetching corpus: 9700, signal 210894/221851 (executing program) 2026/01/14 09:09:18 fetching corpus: 9750, signal 211160/221851 (executing program) 2026/01/14 09:09:18 fetching corpus: 9800, signal 211369/221851 (executing program) 2026/01/14 09:09:18 fetching corpus: 9850, signal 211571/221853 (executing program) 2026/01/14 09:09:18 fetching corpus: 9900, signal 211863/221855 (executing program) 2026/01/14 09:09:18 fetching corpus: 9950, signal 212095/221855 (executing program) 2026/01/14 09:09:18 fetching corpus: 10000, signal 212354/221855 (executing program) 2026/01/14 09:09:18 fetching corpus: 10050, signal 212612/221857 (executing program) 2026/01/14 09:09:18 fetching corpus: 10100, signal 212848/221857 (executing program) 2026/01/14 09:09:18 fetching corpus: 10150, signal 213156/221857 (executing program) 2026/01/14 09:09:19 fetching corpus: 10200, signal 213339/221859 (executing program) 2026/01/14 09:09:19 fetching corpus: 10250, signal 213531/221859 (executing program) 2026/01/14 09:09:19 fetching corpus: 10300, signal 213742/221861 (executing program) 2026/01/14 09:09:19 fetching corpus: 10350, signal 213926/221872 (executing program) 2026/01/14 09:09:19 fetching corpus: 10400, signal 214384/221872 (executing program) 2026/01/14 09:09:19 fetching corpus: 10450, signal 214622/221876 (executing program) 2026/01/14 09:09:19 fetching corpus: 10500, signal 214830/221876 (executing program) 2026/01/14 09:09:19 fetching corpus: 10550, signal 215037/221877 (executing program) 2026/01/14 09:09:19 fetching corpus: 10600, signal 215251/221878 (executing program) 2026/01/14 09:09:20 fetching corpus: 10650, signal 215529/221879 (executing program) 2026/01/14 09:09:20 fetching corpus: 10700, signal 215730/221880 (executing program) 2026/01/14 09:09:20 fetching corpus: 10750, signal 216006/221880 (executing program) 2026/01/14 09:09:20 fetching corpus: 10800, signal 216228/221883 (executing program) 2026/01/14 09:09:20 fetching corpus: 10850, signal 216411/221885 (executing program) 2026/01/14 09:09:20 fetching corpus: 10900, signal 216602/221893 (executing program) 2026/01/14 09:09:20 fetching corpus: 10950, signal 216876/221897 (executing program) 2026/01/14 09:09:20 fetching corpus: 11000, signal 217384/221897 (executing program) 2026/01/14 09:09:20 fetching corpus: 11050, signal 217642/221908 (executing program) 2026/01/14 09:09:20 fetching corpus: 11100, signal 217915/221908 (executing program) 2026/01/14 09:09:21 fetching corpus: 11150, signal 218166/221908 (executing program) 2026/01/14 09:09:21 fetching corpus: 11200, signal 218382/221908 (executing program) 2026/01/14 09:09:21 fetching corpus: 11250, signal 218635/221908 (executing program) 2026/01/14 09:09:21 fetching corpus: 11300, signal 219036/221908 (executing program) 2026/01/14 09:09:21 fetching corpus: 11350, signal 219300/221908 (executing program) 2026/01/14 09:09:21 fetching corpus: 11400, signal 219521/221912 (executing program) 2026/01/14 09:09:21 fetching corpus: 11450, signal 219727/221912 (executing program) 2026/01/14 09:09:21 fetching corpus: 11500, signal 219885/221912 (executing program) 2026/01/14 09:09:21 fetching corpus: 11550, signal 220095/221912 (executing program) 2026/01/14 09:09:21 fetching corpus: 11600, signal 220279/221914 (executing program) 2026/01/14 09:09:22 fetching corpus: 11650, signal 220536/221914 (executing program) 2026/01/14 09:09:22 fetching corpus: 11652, signal 220539/221914 (executing program) 2026/01/14 09:09:22 fetching corpus: 11652, signal 220539/221914 (executing program) 2026/01/14 09:09:23 starting 8 fuzzer processes 09:09:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000400), 0x4) 09:09:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xb, &(0x7f0000000000), 0x4) 09:09:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000000)) 09:09:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = eventfd(0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup2(r2, r0) 09:09:23 executing program 4: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) [ 88.309114] audit: type=1400 audit(1768381764.020:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:09:23 executing program 5: socket$inet6_udp(0xa, 0x2, 0x11) 09:09:24 executing program 6: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, "f2ffecfffffffffffef8c2b978657df3480824"}) 09:09:24 executing program 7: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 89.437537] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.441100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.446254] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.452481] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.458597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.499272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.501684] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.503238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.515239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.522430] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.567746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.570328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.573296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.575128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.580015] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.588837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.590765] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.593580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.597256] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.598855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.602434] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.604331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.607363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.610612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.612589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.619684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.621468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.627632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.630645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.632340] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.633803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.636772] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.643380] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.648895] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.650682] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.652156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.662988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.672844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.685294] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.687609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.531600] Bluetooth: hci1: command tx timeout [ 91.532142] Bluetooth: hci0: command tx timeout [ 91.659823] Bluetooth: hci2: command tx timeout [ 91.723100] Bluetooth: hci4: command tx timeout [ 91.723759] Bluetooth: hci3: command tx timeout [ 91.724328] Bluetooth: hci5: command tx timeout [ 91.724788] Bluetooth: hci6: command tx timeout [ 91.787319] Bluetooth: hci7: command tx timeout [ 93.578994] Bluetooth: hci1: command tx timeout [ 93.579441] Bluetooth: hci0: command tx timeout [ 93.707036] Bluetooth: hci2: command tx timeout [ 93.771042] Bluetooth: hci3: command tx timeout [ 93.771467] Bluetooth: hci6: command tx timeout [ 93.772010] Bluetooth: hci5: command tx timeout [ 93.772397] Bluetooth: hci4: command tx timeout [ 93.835954] Bluetooth: hci7: command tx timeout [ 95.627016] Bluetooth: hci0: command tx timeout [ 95.627467] Bluetooth: hci1: command tx timeout [ 95.755960] Bluetooth: hci2: command tx timeout [ 95.819022] Bluetooth: hci4: command tx timeout [ 95.819459] Bluetooth: hci5: command tx timeout [ 95.819816] Bluetooth: hci6: command tx timeout [ 95.820281] Bluetooth: hci3: command tx timeout [ 95.883622] Bluetooth: hci7: command tx timeout [ 97.679068] Bluetooth: hci1: command tx timeout [ 97.683038] Bluetooth: hci0: command tx timeout [ 97.809605] Bluetooth: hci2: command tx timeout [ 97.872126] Bluetooth: hci6: command tx timeout [ 97.872843] Bluetooth: hci3: command tx timeout [ 97.872887] Bluetooth: hci5: command tx timeout [ 97.876791] Bluetooth: hci4: command tx timeout [ 97.935006] Bluetooth: hci7: command tx timeout [ 122.912482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.913175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.149959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.150583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:09:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = eventfd(0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup2(r2, r0) 09:09:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = eventfd(0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup2(r2, r0) [ 124.020976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.022166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:09:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = eventfd(0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup2(r2, r0) [ 124.127344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.127987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:10:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = eventfd(0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup2(r2, r0) 09:10:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = eventfd(0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup2(r2, r0) 09:10:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = eventfd(0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup2(r2, r0) [ 124.553277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.553915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.569991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.571170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:10:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = eventfd(0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup2(r2, r0) 09:10:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = eventfd(0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup2(r2, r0) [ 124.997521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.998593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.284971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.285588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.333194] audit: type=1400 audit(1768381801.043:8): avc: denied { open } for pid=3858 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.343030] audit: type=1400 audit(1768381801.044:9): avc: denied { kernel } for pid=3858 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.347990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.348562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.444368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.446158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.563411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.564703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.674967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.676258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.997110] Bluetooth: Unexpected continuation frame (len 12) [ 126.002114] Bluetooth: Unexpected continuation frame (len 12) [ 126.183225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.184131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.346839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.347669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.372563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.378834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.454342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.455136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.594318] audit: type=1400 audit(1768381802.304:10): avc: denied { write } for pid=3914 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.727793] loop4: detected capacity change from 0 to 64 [ 126.766557] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:10:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = eventfd(0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup2(r2, r0) 09:10:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xb, &(0x7f0000000000), 0x4) 09:10:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000400), 0x4) 09:10:02 executing program 5: socket$inet6_udp(0xa, 0x2, 0x11) 09:10:02 executing program 6: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, "f2ffecfffffffffffef8c2b978657df3480824"}) 09:10:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000000)) 09:10:02 executing program 7: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:02 executing program 4: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) 09:10:02 executing program 6: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, "f2ffecfffffffffffef8c2b978657df3480824"}) [ 127.035133] Bluetooth: Unexpected continuation frame (len 12) 09:10:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000000)) 09:10:02 executing program 5: socket$inet6_udp(0xa, 0x2, 0x11) 09:10:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xb, &(0x7f0000000000), 0x4) [ 127.096014] loop4: detected capacity change from 0 to 64 [ 127.126124] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:10:02 executing program 5: socket$inet6_udp(0xa, 0x2, 0x11) 09:10:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xb, &(0x7f0000000000), 0x4) 09:10:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000000)) 09:10:02 executing program 7: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:02 executing program 6: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, "f2ffecfffffffffffef8c2b978657df3480824"}) 09:10:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000400), 0x4) 09:10:02 executing program 4: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) [ 127.339052] Bluetooth: Unexpected continuation frame (len 12) 09:10:03 executing program 2: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) [ 127.427403] loop4: detected capacity change from 0 to 64 09:10:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000400), 0x4) 09:10:03 executing program 7: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 127.461040] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.485051] Bluetooth: Unexpected continuation frame (len 12) [ 127.540874] loop2: detected capacity change from 0 to 64 [ 127.573582] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:10:03 executing program 3: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) 09:10:03 executing program 1: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) 09:10:03 executing program 2: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) 09:10:03 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:03 executing program 7: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:03 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:03 executing program 4: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) 09:10:03 executing program 6: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 127.708425] Bluetooth: Unexpected continuation frame (len 12) [ 127.720063] Bluetooth: Unexpected continuation frame (len 12) 09:10:03 executing program 6: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:03 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 127.798735] Bluetooth: Unexpected continuation frame (len 12) [ 127.813294] loop3: detected capacity change from 0 to 64 [ 127.827955] loop4: detected capacity change from 0 to 64 [ 127.837549] Bluetooth: Unexpected continuation frame (len 12) 09:10:03 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 127.847034] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.864411] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.866009] Bluetooth: Unexpected continuation frame (len 12) 09:10:03 executing program 7: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:03 executing program 6: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 127.933008] Bluetooth: Unexpected continuation frame (len 12) [ 127.945301] loop1: detected capacity change from 0 to 64 [ 127.953535] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.992106] Bluetooth: Unexpected continuation frame (len 12) [ 128.013847] Bluetooth: hci7: command 0x0406 tx timeout 09:10:03 executing program 4: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 128.019412] Bluetooth: Unexpected continuation frame (len 12) 09:10:03 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 128.040124] Bluetooth: Unexpected continuation frame (len 12) 09:10:03 executing program 3: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) [ 128.100706] loop2: detected capacity change from 0 to 64 [ 128.136222] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 128.167482] Bluetooth: Unexpected continuation frame (len 12) [ 128.185675] Bluetooth: Unexpected continuation frame (len 12) [ 128.273862] loop3: detected capacity change from 0 to 64 [ 128.276111] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:10:03 executing program 3: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) 09:10:03 executing program 6: syz_emit_ethernet(0xc6, &(0x7f00000000c0)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x4, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x41, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0xd, "20196d4245826d6ee1b351"}]}]}}}}}}}, 0x0) 09:10:03 executing program 2: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) 09:10:03 executing program 4: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 09:10:03 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:04 executing program 7: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:04 executing program 1: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) [ 128.354049] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 128.354098] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 128.355029] Bluetooth: Unexpected continuation frame (len 12) [ 128.355274] Bluetooth: Unexpected continuation frame (len 12) [ 128.364236] Bluetooth: Unexpected continuation frame (len 12) 09:10:04 executing program 6: syz_emit_ethernet(0xc6, &(0x7f00000000c0)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x4, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x41, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0xd, "20196d4245826d6ee1b351"}]}]}}}}}}}, 0x0) 09:10:04 executing program 4: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 09:10:04 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x88, 0xa, 0x0, &(0x7f0000000680)) 09:10:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 09:10:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 09:10:04 executing program 6: syz_emit_ethernet(0xc6, &(0x7f00000000c0)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x4, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x41, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0xd, "20196d4245826d6ee1b351"}]}]}}}}}}}, 0x0) [ 128.486661] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.510204] Bluetooth: Unexpected continuation frame (len 12) [ 128.528904] loop1: detected capacity change from 0 to 64 [ 128.542134] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:10:04 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) [ 128.582954] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 128.611088] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:10:04 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x88, 0xa, 0x0, &(0x7f0000000680)) 09:10:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 09:10:04 executing program 1: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x101) r1 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r1, r2, 0x31) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/204, 0xcc) 09:10:04 executing program 6: syz_emit_ethernet(0xc6, &(0x7f00000000c0)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x4, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x41, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0xd, "20196d4245826d6ee1b351"}]}]}}}}}}}, 0x0) 09:10:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 09:10:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) 09:10:04 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) [ 128.788484] ALSA: seq fatal error: cannot create timer (-22) 09:10:04 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x88, 0xa, 0x0, &(0x7f0000000680)) 09:10:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 09:10:04 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:04 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x88, 0xa, 0x0, &(0x7f0000000680)) 09:10:04 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) [ 129.107725] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:10:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) 09:10:04 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 09:10:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 09:10:04 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:04 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:04 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:04 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) [ 129.231633] ALSA: seq fatal error: cannot create timer (-22) 09:10:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x80045301, &(0x7f00000000c0)) 09:10:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) 09:10:05 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:05 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:05 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:05 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:05 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0xfffffffffffffffe) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a72175", 0x80) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24800, 0x0) sendfile(r1, r2, 0x0, 0xfdef) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0xffff) close_range(r0, 0xffffffffffffffff, 0x0) 09:10:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x9fa5, &(0x7f00000002c0)={&(0x7f0000000800)={0x34, r3, 0x5, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) [ 129.473097] ALSA: seq fatal error: cannot create timer (-22) 09:10:05 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) [ 129.513253] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 09:10:05 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:05 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) 09:10:05 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0xfffffffffffffffe) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a72175", 0x80) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24800, 0x0) sendfile(r1, r2, 0x0, 0xfdef) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0xffff) close_range(r0, 0xffffffffffffffff, 0x0) [ 129.698107] ALSA: seq fatal error: cannot create timer (-22) 09:10:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) prlimit64(0x0, 0x0, 0x0, 0x0) [ 129.739016] Bluetooth: hci6: command 0x0406 tx timeout [ 129.739879] Bluetooth: hci0: command 0x0406 tx timeout 09:10:05 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:05 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 09:10:05 executing program 1: epoll_create1(0x0) pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000004c0), 0x0, &(0x7f0000000080)={0x8e}, 0x0, 0x0) 09:10:05 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) [ 129.803973] Bluetooth: hci3: command 0x0406 tx timeout [ 130.188006] Bluetooth: hci5: command 0x0406 tx timeout 09:10:06 executing program 3: request_key(&(0x7f0000000940)='id_resolver\x00', 0x0, 0x0, 0x0) 09:10:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x9fa5, &(0x7f00000002c0)={&(0x7f0000000800)={0x34, r3, 0x5, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 09:10:06 executing program 1: epoll_create1(0x0) pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000004c0), 0x0, &(0x7f0000000080)={0x8e}, 0x0, 0x0) 09:10:06 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0xfffffffffffffffe) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a72175", 0x80) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24800, 0x0) sendfile(r1, r2, 0x0, 0xfdef) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0xffff) close_range(r0, 0xffffffffffffffff, 0x0) 09:10:06 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0x80086603, &(0x7f00000014c0)) 09:10:06 executing program 7: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) 09:10:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 09:10:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) 09:10:07 executing program 7: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) 09:10:07 executing program 1: epoll_create1(0x0) pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000004c0), 0x0, &(0x7f0000000080)={0x8e}, 0x0, 0x0) 09:10:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) 09:10:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 09:10:07 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0xfffffffffffffffe) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a72175", 0x80) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24800, 0x0) sendfile(r1, r2, 0x0, 0xfdef) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0xffff) close_range(r0, 0xffffffffffffffff, 0x0) 09:10:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x9fa5, &(0x7f00000002c0)={&(0x7f0000000800)={0x34, r3, 0x5, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 09:10:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, 0x1300) 09:10:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0x80086603, &(0x7f00000014c0)) 09:10:07 executing program 7: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) 09:10:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, 0x1300) 09:10:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 09:10:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0x80086603, &(0x7f00000014c0)) 09:10:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) 09:10:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) 09:10:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, 0x1300) 09:10:07 executing program 7: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) 09:10:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 09:10:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) 09:10:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, 0x1300) 09:10:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x9fa5, &(0x7f00000002c0)={&(0x7f0000000800)={0x34, r3, 0x5, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 09:10:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0x80086603, &(0x7f00000014c0)) 09:10:08 executing program 1: epoll_create1(0x0) pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000004c0), 0x0, &(0x7f0000000080)={0x8e}, 0x0, 0x0) 09:10:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 09:10:08 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}}) 09:10:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) 09:10:08 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}}) 09:10:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 09:10:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.syz\x00', 0x0, 0xc9ffff) 09:10:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) 09:10:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 09:10:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x40}, [{}]}, 0x78) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)) 09:10:08 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}}) 09:10:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.syz\x00', 0x0, 0xc9ffff) 09:10:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x40}, [{}]}, 0x78) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)) 09:10:08 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}}) 09:10:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 09:10:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 09:10:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.syz\x00', 0x0, 0xc9ffff) 09:10:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x40}, [{}]}, 0x78) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)) 09:10:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.syz\x00', 0x0, 0xc9ffff) 09:10:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x101, &(0x7f0000003f80)={0x0, 0x3938700}) 09:10:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001540)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}, 0x24}], 0x1}, 0x0) 09:10:09 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 133.481728] netlink: 'syz-executor.5': attribute type 20 has an invalid length. [ 133.486066] netlink: 'syz-executor.5': attribute type 20 has an invalid length. 09:10:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x101, &(0x7f0000003f80)={0x0, 0x3938700}) 09:10:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x40}, [{}]}, 0x78) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)) 09:10:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001540)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}, 0x24}], 0x1}, 0x0) 09:10:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 09:10:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.syz\x00', 0x0, 0xc9ffff) [ 133.554347] netlink: 'syz-executor.5': attribute type 20 has an invalid length. 09:10:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x101, &(0x7f0000003f80)={0x0, 0x3938700}) 09:10:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.syz\x00', 0x0, 0xc9ffff) [ 133.638129] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.638860] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 133.647508] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 133.648077] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 133.648741] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 3 prio class 2 [ 133.651353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.651915] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.652673] Buffer I/O error on dev sr0, logical block 0, async page read [ 133.654081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.654535] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.655243] Buffer I/O error on dev sr0, logical block 1, async page read [ 133.655846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.659984] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.660680] Buffer I/O error on dev sr0, logical block 2, async page read [ 133.661317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.661767] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.669994] Buffer I/O error on dev sr0, logical block 3, async page read [ 133.670601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.678707] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.679628] Buffer I/O error on dev sr0, logical block 4, async page read [ 133.680271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.680694] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.681393] Buffer I/O error on dev sr0, logical block 5, async page read [ 133.683687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.686862] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.687540] Buffer I/O error on dev sr0, logical block 6, async page read [ 133.688274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.688688] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.689354] Buffer I/O error on dev sr0, logical block 7, async page read [ 133.690173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.690692] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.691464] Buffer I/O error on dev sr0, logical block 0, async page read [ 133.692099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.693507] Buffer I/O error on dev sr0, logical block 1, async page read [ 133.694352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.694853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.695506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.705413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.705914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.706483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.734700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.735766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.736318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.736805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.737335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.737813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.738353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.738840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.740130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.740619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.741181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.741662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.743409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.743892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.744427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.744906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.745527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.752836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.753380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.753884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.754456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.755160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.755661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.756198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:10:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001540)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}, 0x24}], 0x1}, 0x0) 09:10:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x101, &(0x7f0000003f80)={0x0, 0x3938700}) 09:10:09 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) process_mrelease(0xffffffffffffffff, 0x0) 09:10:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d40)=[{{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002900)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x20008081) 09:10:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x101, &(0x7f0000003f80)={0x0, 0x3938700}) 09:10:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000019140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000190c0)=ANY=[@ANYBLOB="1800000004010102"], 0x18}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:10:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.syz\x00', 0x0, 0xc9ffff) 09:10:09 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 133.815515] netlink: 'syz-executor.5': attribute type 20 has an invalid length. [ 133.843100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:10:09 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) process_mrelease(0xffffffffffffffff, 0x0) [ 133.855242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:10:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x101, &(0x7f0000003f80)={0x0, 0x3938700}) 09:10:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001540)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}, 0x24}], 0x1}, 0x0) 09:10:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x101, &(0x7f0000003f80)={0x0, 0x3938700}) 09:10:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d40)=[{{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002900)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x20008081) [ 133.898398] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.899191] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 133.899782] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 133.912241] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 133.913370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.913881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.914410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.914895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.923108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.923618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.928031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.928523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.930345] netlink: 'syz-executor.5': attribute type 20 has an invalid length. 09:10:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000019140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000190c0)=ANY=[@ANYBLOB="1800000004010102"], 0x18}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 133.948131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.948648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:10:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d40)=[{{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002900)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x20008081) [ 133.956297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.956789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.957369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.957858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.966589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.967111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.992112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:10:09 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 09:10:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:10:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000019140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000190c0)=ANY=[@ANYBLOB="1800000004010102"], 0x18}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:10:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d40)=[{{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002900)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x20008081) 09:10:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d40)=[{{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002900)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x20008081) 09:10:09 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) process_mrelease(0xffffffffffffffff, 0x0) 09:10:09 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) [ 134.099796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:10:09 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:10:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000019140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000190c0)=ANY=[@ANYBLOB="1800000004010102"], 0x18}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:10:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d40)=[{{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002900)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x20008081) 09:10:09 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5317, &(0x7f00000001c0)={"0c6a0e56b78fcf41c2034531", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(r0, &(0x7f0000003140)={0x0, 0x24}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x89b0, &(0x7f0000000900)={'wlan0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000003180)) fgetxattr(r1, &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) r3 = fork() ptrace(0x10, r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000001900)=0xc) 09:10:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d40)=[{{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002900)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x20008081) 09:10:09 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) process_mrelease(0xffffffffffffffff, 0x0) [ 134.228225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:10:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:10:09 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:10:09 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 09:10:10 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x82003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) 09:10:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) 09:10:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:10:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:10:10 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:10:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x0) 09:10:10 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5317, &(0x7f00000001c0)={"0c6a0e56b78fcf41c2034531", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(r0, &(0x7f0000003140)={0x0, 0x24}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x89b0, &(0x7f0000000900)={'wlan0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000003180)) fgetxattr(r1, &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) r3 = fork() ptrace(0x10, r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000001900)=0xc) [ 134.619164] random: crng reseeded on system resumption 09:10:10 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5317, &(0x7f00000001c0)={"0c6a0e56b78fcf41c2034531", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(r0, &(0x7f0000003140)={0x0, 0x24}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x89b0, &(0x7f0000000900)={'wlan0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000003180)) fgetxattr(r1, &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) r3 = fork() ptrace(0x10, r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000001900)=0xc) [ 134.636259] random: crng reseeded on system resumption 09:10:10 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x82003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) 09:10:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:10:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) 09:10:10 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) [ 134.758218] random: crng reseeded on system resumption 09:10:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:10:10 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x82003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) 09:10:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) 09:10:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x0) [ 134.851769] random: crng reseeded on system resumption 09:10:10 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5317, &(0x7f00000001c0)={"0c6a0e56b78fcf41c2034531", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(r0, &(0x7f0000003140)={0x0, 0x24}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x89b0, &(0x7f0000000900)={'wlan0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000003180)) fgetxattr(r1, &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) r3 = fork() ptrace(0x10, r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000001900)=0xc) 09:10:10 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) 09:10:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:10:10 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x82003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) [ 134.997691] random: crng reseeded on system resumption 09:10:10 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5317, &(0x7f00000001c0)={"0c6a0e56b78fcf41c2034531", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(r0, &(0x7f0000003140)={0x0, 0x24}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x89b0, &(0x7f0000000900)={'wlan0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000003180)) fgetxattr(r1, &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) r3 = fork() ptrace(0x10, r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000001900)=0xc) 09:10:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) 09:10:10 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5317, &(0x7f00000001c0)={"0c6a0e56b78fcf41c2034531", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(r0, &(0x7f0000003140)={0x0, 0x24}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x89b0, &(0x7f0000000900)={'wlan0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000003180)) fgetxattr(r1, &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) r3 = fork() ptrace(0x10, r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000001900)=0xc) 09:10:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x0) 09:10:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:10:10 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) 09:10:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 09:10:10 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x0) sched_rr_get_interval(0x0, 0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:10:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 09:10:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0x184, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-generic\x00'}}}]}, 0x184}}, 0x0) 09:10:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x0) 09:10:11 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd4000a8b) unlink(&(0x7f0000000040)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 09:10:11 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5317, &(0x7f00000001c0)={"0c6a0e56b78fcf41c2034531", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(r0, &(0x7f0000003140)={0x0, 0x24}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x89b0, &(0x7f0000000900)={'wlan0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000003180)) fgetxattr(r1, &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) r3 = fork() ptrace(0x10, r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000001900)=0xc) 09:10:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0x184, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-generic\x00'}}}]}, 0x184}}, 0x0) 09:10:11 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') preadv2(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1, 0x0, 0x0, 0x0) [ 135.420229] audit: type=1400 audit(1768381811.130:11): avc: denied { watch_reads } for pid=4442 comm="syz-executor.3" path="/syzkaller-testdir219866147/syzkaller.ZhJZJ3/33" dev="sda" ino=16004 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 09:10:11 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x0) sched_rr_get_interval(0x0, 0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:10:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 09:10:11 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x0) sched_rr_get_interval(0x0, 0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:10:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000300)={'sit0\x00', 0x0}) 09:10:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:10:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r1, r0) 09:10:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25070000000a0004007770616e330000000a0004007770616e3100000008000300", @ANYRES64=r4], 0x48}}, 0x0) 09:10:11 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') preadv2(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1, 0x0, 0x0, 0x0) 09:10:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0x184, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-generic\x00'}}}]}, 0x184}}, 0x0) 09:10:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r1, r0) 09:10:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0x184, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-generic\x00'}}}]}, 0x184}}, 0x0) 09:10:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 135.775084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.791012] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:10:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 09:10:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r1, r0) 09:10:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:10:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:10:11 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') preadv2(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1, 0x0, 0x0, 0x0) 09:10:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000300)={'sit0\x00', 0x0}) 09:10:11 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x0) sched_rr_get_interval(0x0, 0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:10:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25070000000a0004007770616e330000000a0004007770616e3100000008000300", @ANYRES64=r4], 0x48}}, 0x0) 09:10:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1f) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, "28a587ea6b9da511f7ff1315aa908ba6ccc7a9"}) read(r0, 0x0, 0x40004) 09:10:11 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') preadv2(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1, 0x0, 0x0, 0x0) 09:10:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:10:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 136.118060] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:10:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r1, r0) 09:10:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000300)={'sit0\x00', 0x0}) 09:10:11 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:10:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25070000000a0004007770616e330000000a0004007770616e3100000008000300", @ANYRES64=r4], 0x48}}, 0x0) 09:10:11 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x8, 0x7, 0x0, 0x1, [{}]}) 09:10:11 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:10:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:10:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1f) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, "28a587ea6b9da511f7ff1315aa908ba6ccc7a9"}) read(r0, 0x0, 0x40004) [ 136.361799] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:10:12 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x8, 0x7, 0x0, 0x1, [{}]}) 09:10:12 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:10:12 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000300)={'sit0\x00', 0x0}) 09:10:12 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x8, 0x7, 0x0, 0x1, [{}]}) 09:10:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 09:10:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1f) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, "28a587ea6b9da511f7ff1315aa908ba6ccc7a9"}) read(r0, 0x0, 0x40004) 09:10:12 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:10:12 executing program 2: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) 09:10:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25070000000a0004007770616e330000000a0004007770616e3100000008000300", @ANYRES64=r4], 0x48}}, 0x0) [ 136.625415] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.634389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:10:12 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x8, 0x7, 0x0, 0x1, [{}]}) 09:10:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 09:10:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 09:10:12 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=@orangefs_parent={0x28, 0x2, {{"43e1cdbe1900bb07b9cff4b5af7047df"}, {"e244d9e3b178c1457f73e0e260f33908"}}}, &(0x7f0000000340), 0x0) 09:10:12 executing program 2: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) 09:10:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000), 0x4) 09:10:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 09:10:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 09:10:12 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) 09:10:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1f) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, "28a587ea6b9da511f7ff1315aa908ba6ccc7a9"}) read(r0, 0x0, 0x40004) 09:10:12 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=@orangefs_parent={0x28, 0x2, {{"43e1cdbe1900bb07b9cff4b5af7047df"}, {"e244d9e3b178c1457f73e0e260f33908"}}}, &(0x7f0000000340), 0x0) 09:10:12 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:10:12 executing program 2: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) 09:10:12 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=@orangefs_parent={0x28, 0x2, {{"43e1cdbe1900bb07b9cff4b5af7047df"}, {"e244d9e3b178c1457f73e0e260f33908"}}}, &(0x7f0000000340), 0x0) 09:10:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 09:10:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 09:10:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000), 0x4) 09:10:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000200)={0x1000}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x0, 0x1000, 0x0, 0x1, 0x2, 0x1}, 0x10) 09:10:12 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) 09:10:12 executing program 2: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) [ 137.047229] [ 137.047425] ===================================== [ 137.047807] WARNING: bad unlock balance detected! [ 137.048248] 6.19.0-rc5-next-20260114 #1 Not tainted [ 137.048716] ------------------------------------- [ 137.049201] syz-executor.2/287 is trying to release lock (rcu_read_lock) at: [ 137.050209] [] __wait_on_freeing_inode+0x105/0x350 [ 137.051232] but there are no more locks to release! [ 137.052073] [ 137.052073] other info that might help us debug this: [ 137.053033] 4 locks held by syz-executor.2/287: [ 137.053802] #0: ffff88800f8783f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 137.055019] #1: ffff888017faa078 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 137.056414] #2: ffff88800f87c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 137.058169] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 137.059461] [ 137.059461] stack backtrace: [ 137.060107] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 137.060122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 137.060129] Call Trace: [ 137.060133] [ 137.060138] dump_stack_lvl+0xca/0x120 [ 137.060169] ? __wait_on_freeing_inode+0x105/0x350 [ 137.060184] print_unlock_imbalance_bug+0x118/0x130 [ 137.060199] ? __wait_on_freeing_inode+0x105/0x350 [ 137.060214] lock_release+0x1ee/0x270 [ 137.060230] __wait_on_freeing_inode+0x10a/0x350 [ 137.060245] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 137.060261] ? __pfx_var_wake_function+0x10/0x10 [ 137.060279] ? lock_is_held_type+0x9e/0x120 [ 137.060298] insert_inode_locked+0x25f/0x890 [ 137.060317] __ext4_new_inode+0x223d/0x4cd0 [ 137.060335] ? __pfx___ext4_new_inode+0x10/0x10 [ 137.060350] ? __pfx_avc_has_perm+0x10/0x10 [ 137.060364] ? __pfx___dquot_initialize+0x10/0x10 [ 137.060387] ext4_mkdir+0x331/0xb30 [ 137.060406] ? __pfx_ext4_mkdir+0x10/0x10 [ 137.060422] ? security_inode_permission+0x72/0xe0 [ 137.060436] vfs_mkdir+0x6d8/0xc00 [ 137.060453] do_mkdirat+0x11a/0x440 [ 137.060466] ? __pfx_do_mkdirat+0x10/0x10 [ 137.060479] ? strncpy_from_user+0x21b/0x2f0 [ 137.060497] __x64_sys_mkdir+0x65/0x80 [ 137.060509] do_syscall_64+0xbf/0x420 [ 137.060522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.060535] RIP: 0033:0x7f9f59b7cc27 [ 137.060545] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.060555] RSP: 002b:00007ffd31934668 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 137.060567] RAX: ffffffffffffffda RBX: 00007ffd319346f0 RCX: 00007f9f59b7cc27 [ 137.060574] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd319346f0 [ 137.060581] RBP: 00007ffd319346cc R08: 0000000000000000 R09: 0000000000000004 [ 137.060588] R10: 00007ffd31934406 R11: 0000000000000202 R12: 0000000000000032 [ 137.060595] R13: 0000000000021674 R14: 0000000000000004 R15: 00007ffd31934730 [ 137.060607] [ 137.077441] ------------[ cut here ]------------ [ 137.077819] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.2/287 [ 137.078736] Modules linked in: [ 137.079054] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 137.079845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 137.080548] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 137.081066] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 137.082561] RSP: 0018:ffff88800aacf9e0 EFLAGS: 00010286 [ 137.083043] RAX: 00000000ffffffff RBX: ffff88800f88d280 RCX: ffffffff81565a27 [ 137.083608] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff88800f88d67c [ 137.084230] RBP: ffff88800f88d280 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 137.084796] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f88d280 [ 137.085422] R13: 0000000000000001 R14: ffffffff85c0df10 R15: ffff888032eb1fb0 [ 137.086048] FS: 00005555592e4400(0000) GS:ffff8880e5443000(0000) knlGS:0000000000000000 [ 137.086692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.087214] CR2: 00007f444829d004 CR3: 000000000d0f7000 CR4: 0000000000350ef0 [ 137.087784] Call Trace: [ 137.088079] [ 137.088728] __wait_on_freeing_inode+0x10f/0x350 [ 137.089453] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 137.090539] ? __pfx_var_wake_function+0x10/0x10 [ 137.091767] ? lock_is_held_type+0x9e/0x120 [ 137.092868] insert_inode_locked+0x25f/0x890 [ 137.094513] __ext4_new_inode+0x223d/0x4cd0 [ 137.096998] ? __pfx___ext4_new_inode+0x10/0x10 [ 137.097903] ? __pfx_avc_has_perm+0x10/0x10 [ 137.098551] ? __pfx___dquot_initialize+0x10/0x10 [ 137.100734] ext4_mkdir+0x331/0xb30 [ 137.102688] ? __pfx_ext4_mkdir+0x10/0x10 [ 137.103327] ? security_inode_permission+0x72/0xe0 [ 137.104923] vfs_mkdir+0x6d8/0xc00 [ 137.106325] do_mkdirat+0x11a/0x440 [ 137.107310] ? __pfx_do_mkdirat+0x10/0x10 [ 137.108034] ? strncpy_from_user+0x21b/0x2f0 [ 137.109873] __x64_sys_mkdir+0x65/0x80 [ 137.110519] do_syscall_64+0xbf/0x420 [ 137.111335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.111852] RIP: 0033:0x7f9f59b7cc27 [ 137.112293] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.113869] RSP: 002b:00007ffd31934668 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 137.114485] RAX: ffffffffffffffda RBX: 00007ffd319346f0 RCX: 00007f9f59b7cc27 [ 137.115068] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd319346f0 [ 137.115598] RBP: 00007ffd319346cc R08: 0000000000000000 R09: 0000000000000004 [ 137.116175] R10: 00007ffd31934406 R11: 0000000000000202 R12: 0000000000000032 [ 137.116749] R13: 0000000000021674 R14: 0000000000000004 R15: 00007ffd31934730 [ 137.119371] [ 137.119558] irq event stamp: 284781 [ 137.119833] hardirqs last enabled at (284781): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 137.120658] hardirqs last disabled at (284780): [] _raw_spin_lock_irqsave+0x53/0x60 [ 137.121481] softirqs last enabled at (284776): [] kernel_fpu_end+0x59/0x70 [ 137.122218] softirqs last disabled at (284774): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 137.123008] ---[ end trace 0000000000000000 ]--- 09:10:12 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 09:10:12 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 09:10:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000), 0x4) 09:10:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/file0\x00', r1, &(0x7f00000006c0)='./file0\x00') 09:10:13 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:10:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) getsockname(r0, 0x0, &(0x7f0000000100)) 09:10:13 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) 09:10:13 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 09:10:13 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=@orangefs_parent={0x28, 0x2, {{"43e1cdbe1900bb07b9cff4b5af7047df"}, {"e244d9e3b178c1457f73e0e260f33908"}}}, &(0x7f0000000340), 0x0) 09:10:13 executing program 2: io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="d0", 0x1}]) 09:10:13 executing program 5: r0 = syz_io_uring_setup(0xd66, &(0x7f00000004c0), &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) 09:10:13 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 09:10:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000), 0x4) 09:10:13 executing program 2: io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="d0", 0x1}]) 09:10:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) getsockname(r0, 0x0, &(0x7f0000000100)) 09:10:13 executing program 5: r0 = syz_io_uring_setup(0xd66, &(0x7f00000004c0), &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) 09:10:13 executing program 5: r0 = syz_io_uring_setup(0xd66, &(0x7f00000004c0), &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) 09:10:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) 09:10:13 executing program 2: io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="d0", 0x1}]) 09:10:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) 09:10:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) getsockname(r0, 0x0, &(0x7f0000000100)) 09:10:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/file0\x00', r1, &(0x7f00000006c0)='./file0\x00') 09:10:13 executing program 2: io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="d0", 0x1}]) 09:10:13 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:10:13 executing program 7: io_setup(0x200, &(0x7f00000000c0)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="30c8", 0x2}]) 09:10:13 executing program 5: r0 = syz_io_uring_setup(0xd66, &(0x7f00000004c0), &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) 09:10:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/file0\x00', r1, &(0x7f00000006c0)='./file0\x00') 09:10:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) 09:10:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/file0\x00', r1, &(0x7f00000006c0)='./file0\x00') 09:10:13 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffffffff4b}], 0x0, &(0x7f0000010f60)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x89) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2008000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfl|gid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,access=client,access=', @ANYRESDEC=r3, @ANYBLOB=',seclabel,audit,\x00']) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) r6 = syz_io_uring_complete(0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8a00018}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfe, {0x5, 0x5, './mnt', './mnt'}, [""]}, 0x24}}, 0x45) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000001c0)={'wlan0\x00', {0x2, 0x0, @dev}}) mount$9p_fd(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x2080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c76657273696f6e3d3970323030302e4c2c6c6f6f73652c76657273696f6e3d3970323030302c63616368653d6e6f6e652c64656275673d3078303030303030303030303030303030302c636f6e746578743d73797361646d5f752c61707072616973652c61707072616973652c7375626a5f726f6c653d2c7063723d30303030303030303030303030303030303031332c646f6e745f686173682c61756469742c00257b6b55e7f6e3f09f5d7b6b26aa834925da8a0d23a094d380147d7b8615c0cb0c36d4f7ce340bb85d38ddcf903ea12fb4"]) 09:10:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) getsockname(r0, 0x0, &(0x7f0000000100)) 09:10:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/file0\x00', r1, &(0x7f00000006c0)='./file0\x00') [ 137.792226] set_capacity_and_notify: 3 callbacks suppressed [ 137.792249] loop5: detected capacity change from 0 to 16383 [ 137.813533] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 09:10:13 executing program 7: io_setup(0x200, &(0x7f00000000c0)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="30c8", 0x2}]) [ 137.839009] EXT4-fs (loop5): group descriptors corrupted! [ 137.874575] syz-executor.6 (4647) used greatest stack depth: 23864 bytes left 09:10:13 executing program 2: io_setup(0x200, &(0x7f00000000c0)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="30c8", 0x2}]) 09:10:13 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffffffff4b}], 0x0, &(0x7f0000010f60)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x89) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2008000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfl|gid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,access=client,access=', @ANYRESDEC=r3, @ANYBLOB=',seclabel,audit,\x00']) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) r6 = syz_io_uring_complete(0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8a00018}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfe, {0x5, 0x5, './mnt', './mnt'}, [""]}, 0x24}}, 0x45) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000001c0)={'wlan0\x00', {0x2, 0x0, @dev}}) mount$9p_fd(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x2080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c76657273696f6e3d3970323030302e4c2c6c6f6f73652c76657273696f6e3d3970323030302c63616368653d6e6f6e652c64656275673d3078303030303030303030303030303030302c636f6e746578743d73797361646d5f752c61707072616973652c61707072616973652c7375626a5f726f6c653d2c7063723d30303030303030303030303030303030303031332c646f6e745f686173682c61756469742c00257b6b55e7f6e3f09f5d7b6b26aa834925da8a0d23a094d380147d7b8615c0cb0c36d4f7ce340bb85d38ddcf903ea12fb4"]) 09:10:13 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:10:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) [ 137.918138] loop5: detected capacity change from 0 to 16383 [ 137.920519] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 137.921236] EXT4-fs (loop5): group descriptors corrupted! 09:10:13 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffffffff4b}], 0x0, &(0x7f0000010f60)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x89) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2008000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfl|gid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,access=client,access=', @ANYRESDEC=r3, @ANYBLOB=',seclabel,audit,\x00']) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) r6 = syz_io_uring_complete(0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8a00018}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfe, {0x5, 0x5, './mnt', './mnt'}, [""]}, 0x24}}, 0x45) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000001c0)={'wlan0\x00', {0x2, 0x0, @dev}}) mount$9p_fd(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x2080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c76657273696f6e3d3970323030302e4c2c6c6f6f73652c76657273696f6e3d3970323030302c63616368653d6e6f6e652c64656275673d3078303030303030303030303030303030302c636f6e746578743d73797361646d5f752c61707072616973652c61707072616973652c7375626a5f726f6c653d2c7063723d30303030303030303030303030303030303031332c646f6e745f686173682c61756469742c00257b6b55e7f6e3f09f5d7b6b26aa834925da8a0d23a094d380147d7b8615c0cb0c36d4f7ce340bb85d38ddcf903ea12fb4"]) [ 138.036536] loop4: detected capacity change from 0 to 16383 [ 138.038431] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 138.039145] EXT4-fs (loop4): group descriptors corrupted! 09:10:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/file0\x00', r1, &(0x7f00000006c0)='./file0\x00') 09:10:13 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffffffff4b}], 0x0, &(0x7f0000010f60)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x89) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2008000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfl|gid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,access=client,access=', @ANYRESDEC=r3, @ANYBLOB=',seclabel,audit,\x00']) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) r6 = syz_io_uring_complete(0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8a00018}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfe, {0x5, 0x5, './mnt', './mnt'}, [""]}, 0x24}}, 0x45) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000001c0)={'wlan0\x00', {0x2, 0x0, @dev}}) mount$9p_fd(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x2080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c76657273696f6e3d3970323030302e4c2c6c6f6f73652c76657273696f6e3d3970323030302c63616368653d6e6f6e652c64656275673d3078303030303030303030303030303030302c636f6e746578743d73797361646d5f752c61707072616973652c61707072616973652c7375626a5f726f6c653d2c7063723d30303030303030303030303030303030303031332c646f6e745f686173682c61756469742c00257b6b55e7f6e3f09f5d7b6b26aa834925da8a0d23a094d380147d7b8615c0cb0c36d4f7ce340bb85d38ddcf903ea12fb4"]) 09:10:13 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffffffff4b}], 0x0, &(0x7f0000010f60)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x89) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2008000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfl|gid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,access=client,access=', @ANYRESDEC=r3, @ANYBLOB=',seclabel,audit,\x00']) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) r6 = syz_io_uring_complete(0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8a00018}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfe, {0x5, 0x5, './mnt', './mnt'}, [""]}, 0x24}}, 0x45) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000001c0)={'wlan0\x00', {0x2, 0x0, @dev}}) mount$9p_fd(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x2080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c76657273696f6e3d3970323030302e4c2c6c6f6f73652c76657273696f6e3d3970323030302c63616368653d6e6f6e652c64656275673d3078303030303030303030303030303030302c636f6e746578743d73797361646d5f752c61707072616973652c61707072616973652c7375626a5f726f6c653d2c7063723d30303030303030303030303030303030303031332c646f6e745f686173682c61756469742c00257b6b55e7f6e3f09f5d7b6b26aa834925da8a0d23a094d380147d7b8615c0cb0c36d4f7ce340bb85d38ddcf903ea12fb4"]) 09:10:13 executing program 7: io_setup(0x200, &(0x7f00000000c0)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="30c8", 0x2}]) 09:10:13 executing program 2: io_setup(0x200, &(0x7f00000000c0)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="30c8", 0x2}]) 09:10:13 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x2f, 0x0) 09:10:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/file0\x00', r1, &(0x7f00000006c0)='./file0\x00') 09:10:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) [ 138.177049] loop4: detected capacity change from 0 to 16383 [ 138.191589] loop5: detected capacity change from 0 to 16383 [ 138.196288] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 138.201105] EXT4-fs (loop4): group descriptors corrupted! [ 138.203347] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 138.204118] EXT4-fs (loop5): group descriptors corrupted! 09:10:13 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x2f, 0x0) 09:10:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) 09:10:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) 09:10:13 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffffffff4b}], 0x0, &(0x7f0000010f60)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x89) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2008000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfl|gid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,access=client,access=', @ANYRESDEC=r3, @ANYBLOB=',seclabel,audit,\x00']) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) r6 = syz_io_uring_complete(0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8a00018}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfe, {0x5, 0x5, './mnt', './mnt'}, [""]}, 0x24}}, 0x45) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000001c0)={'wlan0\x00', {0x2, 0x0, @dev}}) mount$9p_fd(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x2080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c76657273696f6e3d3970323030302e4c2c6c6f6f73652c76657273696f6e3d3970323030302c63616368653d6e6f6e652c64656275673d3078303030303030303030303030303030302c636f6e746578743d73797361646d5f752c61707072616973652c61707072616973652c7375626a5f726f6c653d2c7063723d30303030303030303030303030303030303031332c646f6e745f686173682c61756469742c00257b6b55e7f6e3f09f5d7b6b26aa834925da8a0d23a094d380147d7b8615c0cb0c36d4f7ce340bb85d38ddcf903ea12fb4"]) 09:10:13 executing program 7: io_setup(0x200, &(0x7f00000000c0)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="30c8", 0x2}]) 09:10:13 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffffffff4b}], 0x0, &(0x7f0000010f60)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x89) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2008000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfl|gid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,access=client,access=', @ANYRESDEC=r3, @ANYBLOB=',seclabel,audit,\x00']) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) r6 = syz_io_uring_complete(0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8a00018}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfe, {0x5, 0x5, './mnt', './mnt'}, [""]}, 0x24}}, 0x45) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000001c0)={'wlan0\x00', {0x2, 0x0, @dev}}) mount$9p_fd(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x2080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c76657273696f6e3d3970323030302e4c2c6c6f6f73652c76657273696f6e3d3970323030302c63616368653d6e6f6e652c64656275673d3078303030303030303030303030303030302c636f6e746578743d73797361646d5f752c61707072616973652c61707072616973652c7375626a5f726f6c653d2c7063723d30303030303030303030303030303030303031332c646f6e745f686173682c61756469742c00257b6b55e7f6e3f09f5d7b6b26aa834925da8a0d23a094d380147d7b8615c0cb0c36d4f7ce340bb85d38ddcf903ea12fb4"]) 09:10:13 executing program 2: io_setup(0x200, &(0x7f00000000c0)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="30c8", 0x2}]) [ 138.307347] loop5: detected capacity change from 0 to 16383 [ 138.311129] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 138.311813] EXT4-fs (loop5): group descriptors corrupted! [ 138.344420] loop4: detected capacity change from 0 to 16383 [ 138.348150] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 138.348833] EXT4-fs (loop4): group descriptors corrupted! 09:10:14 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x2f, 0x0) 09:10:14 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) 09:10:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) 09:10:14 executing program 5: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 09:10:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1814c2, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x80000001}}, 0x0) 09:10:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000005980)={0x77359400}) 03:33:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1814c2, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x80000001}}, 0x0) 03:33:20 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) 03:33:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000480)) 03:33:20 executing program 0: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 03:33:20 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x2f, 0x0) 03:33:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1814c2, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x80000001}}, 0x0) 03:33:20 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000005980)={0x77359400}) 03:33:20 executing program 5: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 03:33:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) 03:33:20 executing program 6: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 03:33:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1814c2, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x80000001}}, 0x0) 03:33:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) 03:33:20 executing program 0: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 03:33:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000480)) 03:33:20 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000005980)={0x77359400}) 03:33:20 executing program 5: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 03:33:20 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 03:33:20 executing program 6: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 03:33:20 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 03:33:20 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000005980)={0x77359400}) 03:33:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000480)) 03:33:20 executing program 5: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 03:33:20 executing program 6: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 03:33:20 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 03:33:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000480)) 03:33:20 executing program 0: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 03:33:20 executing program 0: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 03:33:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 3: ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0x2000, 0x0) 03:33:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) 03:33:20 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r0, &(0x7f0000003f00)=[{&(0x7f0000001cc0)=""/35, 0x23}], 0x1, 0x8000, 0x0) 03:33:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000200)="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", 0x5fc) 03:33:20 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x1002000) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x407, 0x1002000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r4, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:33:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0x84b, 0x4) 03:33:20 executing program 2: syslog(0x0, 0x0, 0x0) [ 139.407849] audit: type=1400 audit(2000000000.474:12): avc: denied { relabelto } for pid=4807 comm="syz-executor.3" name="PACKET" dev="sockfs" ino=6922 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dpkg_var_lib_t:s0 tclass=packet_socket permissive=1 03:33:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) 03:33:20 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x1002000) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x407, 0x1002000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r4, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:33:20 executing program 3: ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0x2000, 0x0) 03:33:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) 03:33:20 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r0, &(0x7f0000003f00)=[{&(0x7f0000001cc0)=""/35, 0x23}], 0x1, 0x8000, 0x0) 03:33:20 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r0, &(0x7f0000003f00)=[{&(0x7f0000001cc0)=""/35, 0x23}], 0x1, 0x8000, 0x0) 03:33:20 executing program 3: ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0x2000, 0x0) 03:33:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000200)="3ddce8155aa35df37d37a86c15c0fbd92272220704aa1a5264fd1d11312d9b17d0fd0a2dfdf63a4feddc6bef9bcc5fe7d44d5c980affb732df72ce7b06dd92b0d5359ae3269474ab992ccb3bb57409edd8af133dbfb3c950e6bdd03b15ef4ebc96194fedf8a7910f85c2dd3d009cce02e4547fe76ffb8a89bac3e1045ecfad13fa0467f01d85b60bbe212f7cb703f9395f973d8518d4899165d355e1dcd3c4c53d464f0acb493cac5cedf133147c0ee1c3ab6de8a70cfbbbb3d52962df174a7897a165a333c87ad5c78a7c49cb153dad3ecda63be5626878acf7cb437cf817f5e667bda7dd6f27a1e55a5e59e1c219cd7404b275fd65063ee4aaf73ebc32ea3c7761f1e8bc984cee424337e7be9ea36cdee57946be95fd313daf15bcc74c9b9ac7c073b8c554ef0a0f1da357377ae34636c35230aa018b33191f7069fc10ea816c02613c98630b8620a5ed8ef1a1d9c3ee019b8a8c74adbdcb2657316fe68157e33e6a68b49b87b35a2195a6432a696ad4c1b7fb6e3b5e65570f2e99399ce8815c33c7b6557aa66ff28e6ed080ca66e7293f76ed883e0c47dfe2f67fff1ccc9bd5b08bfa1ad68fea40fdf21cd29495dd7734e0b4d3700bcc71b9d61137cf88c490c5286ad8dc4823a6c36228083eaeb1dc1af43dc9b5378b2ed5cd862b12c76140550a62a34e9beecc6b3a8dc78708f4d386ba5b35d3059c991a66e41722b888788b43f65aac5424ba6215c9996e85ba8a23a27dc747189b0974f8edf2f61c678777c8b7f0764dc073872819f7db98f2c983cfed1ce326a7d8756cf3b223e3a92f3b6198b9087d0f0a57297efb84e0b181aa45b620c9ad189066d5af071ead16a0d717f62eea672bf473926cf16bbfa4c906466f12ceedecb07732c6d3d2413a68dfeeb4f2a88a4c42c2ffc9669984bdceb8cbd1b50dad85e2c00a75ae137a3b1dc4239c81fce9a573ab1dabf3090aa54be9ed4aade42775a81139080b21502cf7c621d95c6580908f4ff7d6ad05d16d180fac9865626602e687c8c0f8b652a9b6440a11c380c0f5ad5d52848a254b27f97ddb23362ce001c1214d16618c4c453b229085a4717f618a8a4d7a6126047c34e574ea03556707fae4c4f4e1e4e71c5befc7d545411de02685bdc4032fa35a352db3ae1958eff9b83ecba5120fd17f5a872aad5c44850b0237cf4eb6cbf157ade1b15ffdbf4661ba0195e5b1e6c158127393024e6cb8f05cc74d944eab8b8cfb1a1ed58c2b1ba4da0a305ab98d0587643dbe0bc302d9fd0a54ce6941b71877fdbb0f99b67ddca46cb32cfbda511bf0bf30f46434c093ce2bd04ffc1687d6693db94eaf112ebab4cbcbdc8d917560ede4b651a2e6359781963db77d32758c25edaec19014bacbd79fbde9317296872ea0dfc602130bd158905558498b5e9d7be82c319350cfc7a0d7a3dc51a157c020d78478f5f9c51621ffb43d1fabf669c37a1cd764f6af3ef11a609b8549eaea94415c4f4cc74b780ecb5c0dcd338f96c337502d918b7ccd4bb6f30ce8d6ca91e4b0409056fcb547bb65f2cb922c1a04a40514e35f8062e01e26681be6716f5369e3f1d80b0b51e401c4cfca2f5436a04b7bb4f15a4a6708c16554b5408b6a121203c4d10e4cd9ec8f2c032327355180cf0a342adbeee9aab2727648818d246047b35f53c9a1348de6fc95322780bb029d9b05e7152de2d92434017f571ac49d764154af7d99785aaf285e38cef951192af32a256471d42147f8c9048b4f73aff405dc63b4399f070e9a9f874fcaf75456e76cb17b0fc090b4199bca065c069abb3f0bc9b29039753b4cf54fd05aacfc0b0ac5cf26da213abf3238bc4940fc23618a9cf533c97740cd401236498b1b5802a4eef5b4ae2e4e5f95931d058485384c084262f1114c717ba90878960d21f28b618b63c783ddb609ddb2092d1e79603fc7969a87d1ffc36ba973e27d0c76eb874f58dbdb617259dee589c3ab143b53fc3b428a369c67472f472219b86f2fc44840b672eb673bd3a4cdf7a9363607d1da5734e1872074f5ace941c5fe4c7f7c0e2965be5088e89647e7917be30e411315102e083581e6d335eb8195cd03a6519990602a3ba9b51d34ba58b8f15bfed87e67b235e8664bd12b9cc733454367ebadb015751a31154473c1c79b61", 0x5fc) 03:33:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) 03:33:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) 03:33:20 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r0, &(0x7f0000003f00)=[{&(0x7f0000001cc0)=""/35, 0x23}], 0x1, 0x8000, 0x0) 03:33:20 executing program 3: ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0x2000, 0x0) 03:33:20 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x1002000) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x407, 0x1002000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r4, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:33:20 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x3]}, 0x8) 03:33:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) 03:33:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) 03:33:20 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x1002000) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x407, 0x1002000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r4, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:33:20 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) 03:33:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000200)="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", 0x5fc) 03:33:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x1002000) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x407, 0x1002000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r4, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:33:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000200)="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", 0x5fc) 03:33:20 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x3]}, 0x8) 03:33:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 03:33:20 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x1002000) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x407, 0x1002000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r4, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:33:20 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) 03:33:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r3}]}, 0x2c, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10000, 0x146) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r5}]}, 0x2c, 0x0) statx(r1, &(0x7f0000000580)='./file0/file0\x00', 0x100, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x4, r2}, {0x2, 0x1}, {0x2, 0x0, r2}, {0x2, 0x2}, {0x2, 0x7, r4}, {0x2, 0x4, r2}, {0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x1, r5}, {0x8, 0x2, r3}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x2, r6}, {0x8, 0x2, r7}], {0x10, 0x2}}, 0x9c, 0x2) fchown(r0, 0x0, r5) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r5) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000008000000020b4ae5f9625daefd8c69b8ab86c5a1d19f0fbfa8072d5f5e5a1ac8978d82ed8cb2d3092bc129e92b7422121a95af42bcb7a724cbabebfc27fbe0b12d18b229b65a04a94283519669ef6132050f7157814b64b1edf5e60e4e9"], 0x24, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x4) 03:33:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) 03:33:21 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x1002000) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x407, 0x1002000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r4, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:33:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 03:33:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x8000) [ 139.960795] loop1: detected capacity change from 0 to 64 [ 139.962201] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:33:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x0) 03:33:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x3]}, 0x8) 03:33:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x8000) 03:33:21 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) [ 140.067798] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:33:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x8000) 03:33:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r3}]}, 0x2c, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10000, 0x146) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r5}]}, 0x2c, 0x0) statx(r1, &(0x7f0000000580)='./file0/file0\x00', 0x100, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x4, r2}, {0x2, 0x1}, {0x2, 0x0, r2}, {0x2, 0x2}, {0x2, 0x7, r4}, {0x2, 0x4, r2}, {0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x1, r5}, {0x8, 0x2, r3}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x2, r6}, {0x8, 0x2, r7}], {0x10, 0x2}}, 0x9c, 0x2) fchown(r0, 0x0, r5) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r5) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000008000000020b4ae5f9625daefd8c69b8ab86c5a1d19f0fbfa8072d5f5e5a1ac8978d82ed8cb2d3092bc129e92b7422121a95af42bcb7a724cbabebfc27fbe0b12d18b229b65a04a94283519669ef6132050f7157814b64b1edf5e60e4e9"], 0x24, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x4) 03:33:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x3]}, 0x8) 03:33:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 03:33:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x0) 03:33:21 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) 03:33:21 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r3}]}, 0x2c, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10000, 0x146) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r5}]}, 0x2c, 0x0) statx(r1, &(0x7f0000000580)='./file0/file0\x00', 0x100, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x4, r2}, {0x2, 0x1}, {0x2, 0x0, r2}, {0x2, 0x2}, {0x2, 0x7, r4}, {0x2, 0x4, r2}, {0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x1, r5}, {0x8, 0x2, r3}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x2, r6}, {0x8, 0x2, r7}], {0x10, 0x2}}, 0x9c, 0x2) fchown(r0, 0x0, r5) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r5) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000008000000020b4ae5f9625daefd8c69b8ab86c5a1d19f0fbfa8072d5f5e5a1ac8978d82ed8cb2d3092bc129e92b7422121a95af42bcb7a724cbabebfc27fbe0b12d18b229b65a04a94283519669ef6132050f7157814b64b1edf5e60e4e9"], 0x24, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x4) 03:33:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) [ 140.204179] loop0: detected capacity change from 0 to 64 [ 140.208699] loop1: detected capacity change from 0 to 64 [ 140.214775] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.220337] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:33:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 03:33:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x8000) 03:33:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x80000001, 0x5) 03:33:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) 03:33:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') pwritev(r1, 0x0, 0x0, 0x0, 0x0) [ 140.291161] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:33:21 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r3}]}, 0x2c, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10000, 0x146) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r5}]}, 0x2c, 0x0) statx(r1, &(0x7f0000000580)='./file0/file0\x00', 0x100, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x4, r2}, {0x2, 0x1}, {0x2, 0x0, r2}, {0x2, 0x2}, {0x2, 0x7, r4}, {0x2, 0x4, r2}, {0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x1, r5}, {0x8, 0x2, r3}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x2, r6}, {0x8, 0x2, r7}], {0x10, 0x2}}, 0x9c, 0x2) fchown(r0, 0x0, r5) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r5) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000008000000020b4ae5f9625daefd8c69b8ab86c5a1d19f0fbfa8072d5f5e5a1ac8978d82ed8cb2d3092bc129e92b7422121a95af42bcb7a724cbabebfc27fbe0b12d18b229b65a04a94283519669ef6132050f7157814b64b1edf5e60e4e9"], 0x24, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x4) 03:33:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x0) [ 140.306251] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.373279] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.417114] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:33:21 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r3}]}, 0x2c, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10000, 0x146) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r5}]}, 0x2c, 0x0) statx(r1, &(0x7f0000000580)='./file0/file0\x00', 0x100, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x4, r2}, {0x2, 0x1}, {0x2, 0x0, r2}, {0x2, 0x2}, {0x2, 0x7, r4}, {0x2, 0x4, r2}, {0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x1, r5}, {0x8, 0x2, r3}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x2, r6}, {0x8, 0x2, r7}], {0x10, 0x2}}, 0x9c, 0x2) fchown(r0, 0x0, r5) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r5) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000008000000020b4ae5f9625daefd8c69b8ab86c5a1d19f0fbfa8072d5f5e5a1ac8978d82ed8cb2d3092bc129e92b7422121a95af42bcb7a724cbabebfc27fbe0b12d18b229b65a04a94283519669ef6132050f7157814b64b1edf5e60e4e9"], 0x24, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x4) 03:33:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) 03:33:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') pwritev(r1, 0x0, 0x0, 0x0, 0x0) 03:33:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x80000001, 0x5) 03:33:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x0) 03:33:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r3}]}, 0x2c, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10000, 0x146) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r5}]}, 0x2c, 0x0) statx(r1, &(0x7f0000000580)='./file0/file0\x00', 0x100, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x4, r2}, {0x2, 0x1}, {0x2, 0x0, r2}, {0x2, 0x2}, {0x2, 0x7, r4}, {0x2, 0x4, r2}, {0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x1, r5}, {0x8, 0x2, r3}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x2, r6}, {0x8, 0x2, r7}], {0x10, 0x2}}, 0x9c, 0x2) fchown(r0, 0x0, r5) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r5) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000008000000020b4ae5f9625daefd8c69b8ab86c5a1d19f0fbfa8072d5f5e5a1ac8978d82ed8cb2d3092bc129e92b7422121a95af42bcb7a724cbabebfc27fbe0b12d18b229b65a04a94283519669ef6132050f7157814b64b1edf5e60e4e9"], 0x24, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x4) 03:33:21 executing program 5: timer_create(0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) 03:33:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') pwritev(r1, 0x0, 0x0, 0x0, 0x0) 03:33:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') pwritev(r1, 0x0, 0x0, 0x0, 0x0) 03:33:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) [ 140.513015] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.540648] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:33:21 executing program 5: timer_create(0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) 03:33:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') pwritev(r1, 0x0, 0x0, 0x0, 0x0) 03:33:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x80000001, 0x5) 03:33:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) 03:33:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r3}]}, 0x2c, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10000, 0x146) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r5}]}, 0x2c, 0x0) statx(r1, &(0x7f0000000580)='./file0/file0\x00', 0x100, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x4, r2}, {0x2, 0x1}, {0x2, 0x0, r2}, {0x2, 0x2}, {0x2, 0x7, r4}, {0x2, 0x4, r2}, {0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x1, r5}, {0x8, 0x2, r3}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x2, r6}, {0x8, 0x2, r7}], {0x10, 0x2}}, 0x9c, 0x2) fchown(r0, 0x0, r5) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r5) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000008000000020b4ae5f9625daefd8c69b8ab86c5a1d19f0fbfa8072d5f5e5a1ac8978d82ed8cb2d3092bc129e92b7422121a95af42bcb7a724cbabebfc27fbe0b12d18b229b65a04a94283519669ef6132050f7157814b64b1edf5e60e4e9"], 0x24, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x4) [ 140.677350] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:33:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') pwritev(r1, 0x0, 0x0, 0x0, 0x0) 03:33:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000), 0x4) 03:33:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) [ 140.706734] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.801729] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.871157] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:33:21 executing program 5: timer_create(0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) 03:33:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) 03:33:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000), 0x4) 03:33:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') pwritev(r1, 0x0, 0x0, 0x0, 0x0) 03:33:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 03:33:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x80000001, 0x5) 03:33:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) 03:33:21 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) 03:33:22 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 03:33:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000), 0x4) 03:33:22 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0x2710}}, 0x0) 03:33:22 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000002c0)={0x0, 0x1f, 0x0, 0x0, 0x81, 0xee39}) 03:33:22 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) 03:33:22 executing program 5: timer_create(0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) 03:33:22 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) 03:33:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 03:33:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) 03:33:22 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000002c0)={0x0, 0x1f, 0x0, 0x0, 0x81, 0xee39}) 03:33:22 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 03:33:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000), 0x4) 03:33:22 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000002c0)={0x0, 0x1f, 0x0, 0x0, 0x81, 0xee39}) 03:33:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 03:33:22 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) 03:33:22 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000002c0)={0x0, 0x1f, 0x0, 0x0, 0x81, 0xee39}) 03:33:22 executing program 5: capget(0x0, 0x0) 03:33:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) 03:33:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 03:33:22 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) 03:33:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) 03:33:22 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000002c0)={0x0, 0x1f, 0x0, 0x0, 0x81, 0xee39}) 03:33:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="a2", 0x1}], 0x1, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) recvmmsg$unix(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 03:33:22 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) 03:33:22 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}], 0x18}, 0x0) 03:33:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) 03:33:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 03:33:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x67, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) 03:33:22 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000002c0)={0x0, 0x1f, 0x0, 0x0, 0x81, 0xee39}) 03:33:22 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 03:33:22 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) 03:33:22 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}], 0x18}, 0x0) 03:33:22 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000002c0)={0x0, 0x1f, 0x0, 0x0, 0x81, 0xee39}) 03:33:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="a2", 0x1}], 0x1, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) recvmmsg$unix(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 03:33:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x10c, &(0x7f0000001000)=ANY=[], 0x0) recvfrom(r0, 0x0, 0x10c, 0x0, 0x0, 0x0) 03:33:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x67, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) 03:33:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 03:33:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="a2", 0x1}], 0x1, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) recvmmsg$unix(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 03:33:23 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}], 0x18}, 0x0) 03:33:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f VM DIAGNOSIS: 09:10:13 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff1100369af7b RCX=ffffffff81e7a6a9 RDX=ffff88801690d280 RSI=ffff88801b39ab00 RDI=0000000000000fff RBP=ffff88801b39ab00 RSP=ffff88801b4d7b68 R8 =0000000000000001 R9 =ffffed10012c7985 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=ffffffff84f7bc60 R14=0000000000000132 R15=ffff88800f161400 RIP=ffffffff817576f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555709c6400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4447e99018 CR3=000000000c8e3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f4447e6c7c000007f4447e6c7c8 XMM02=00007f4447e6c7e000007f4447e6c7c0 XMM03=00007f4447e6c7c800007f4447e6c7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88806cf08918 R8 =0000000000000001 R9 =ffffed100d9e1119 R10=0000000000000000 R11=6572617764726148 R12=0000000000000000 R13=ffffffff889c0970 R14=ffffffff889c0920 R15=ffffffff889c0be0 RIP=ffffffff8297395d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555592e4400 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f444829d004 CR3=000000000d0f7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000