Warning: Permanently added '[localhost]:31956' (ECDSA) to the list of known hosts. 2026/01/13 09:35:45 fuzzer started 2026/01/13 09:35:45 dialing manager at localhost:38155 syzkaller login: [ 48.486251] cgroup: Unknown subsys name 'net' [ 48.543746] cgroup: Unknown subsys name 'cpuset' [ 48.556426] cgroup: Unknown subsys name 'rlimit' 2026/01/13 09:35:55 syscalls: 2214 2026/01/13 09:35:55 code coverage: enabled 2026/01/13 09:35:55 comparison tracing: enabled 2026/01/13 09:35:55 extra coverage: enabled 2026/01/13 09:35:55 setuid sandbox: enabled 2026/01/13 09:35:55 namespace sandbox: enabled 2026/01/13 09:35:55 Android sandbox: enabled 2026/01/13 09:35:55 fault injection: enabled 2026/01/13 09:35:55 leak checking: enabled 2026/01/13 09:35:55 net packet injection: enabled 2026/01/13 09:35:55 net device setup: enabled 2026/01/13 09:35:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/13 09:35:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/13 09:35:55 USB emulation: enabled 2026/01/13 09:35:55 hci packet injection: enabled 2026/01/13 09:35:55 wifi device emulation: enabled 2026/01/13 09:35:55 802.15.4 emulation: enabled 2026/01/13 09:35:55 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/13 09:35:55 fetching corpus: 50, signal 27695/31189 (executing program) 2026/01/13 09:35:55 fetching corpus: 100, signal 41774/46609 (executing program) 2026/01/13 09:35:55 fetching corpus: 150, signal 50251/56450 (executing program) 2026/01/13 09:35:55 fetching corpus: 200, signal 56399/63936 (executing program) 2026/01/13 09:35:55 fetching corpus: 250, signal 62210/70973 (executing program) 2026/01/13 09:35:56 fetching corpus: 300, signal 69418/79195 (executing program) 2026/01/13 09:35:56 fetching corpus: 350, signal 74902/85650 (executing program) 2026/01/13 09:35:56 fetching corpus: 400, signal 79643/91402 (executing program) 2026/01/13 09:35:56 fetching corpus: 450, signal 83005/95818 (executing program) 2026/01/13 09:35:56 fetching corpus: 500, signal 87893/101588 (executing program) 2026/01/13 09:35:56 fetching corpus: 550, signal 90037/104703 (executing program) 2026/01/13 09:35:56 fetching corpus: 600, signal 92286/107903 (executing program) 2026/01/13 09:35:57 fetching corpus: 650, signal 95339/111799 (executing program) 2026/01/13 09:35:57 fetching corpus: 700, signal 97167/114571 (executing program) 2026/01/13 09:35:57 fetching corpus: 750, signal 100027/118210 (executing program) 2026/01/13 09:35:57 fetching corpus: 800, signal 101399/120524 (executing program) 2026/01/13 09:35:57 fetching corpus: 850, signal 104000/123867 (executing program) 2026/01/13 09:35:57 fetching corpus: 900, signal 105914/126593 (executing program) 2026/01/13 09:35:57 fetching corpus: 950, signal 107135/128619 (executing program) 2026/01/13 09:35:57 fetching corpus: 1000, signal 109230/131463 (executing program) 2026/01/13 09:35:57 fetching corpus: 1050, signal 110983/134024 (executing program) 2026/01/13 09:35:58 fetching corpus: 1100, signal 112891/136597 (executing program) 2026/01/13 09:35:58 fetching corpus: 1150, signal 114189/138720 (executing program) 2026/01/13 09:35:58 fetching corpus: 1200, signal 115693/140931 (executing program) 2026/01/13 09:35:58 fetching corpus: 1250, signal 117051/142970 (executing program) 2026/01/13 09:35:58 fetching corpus: 1300, signal 118570/145185 (executing program) 2026/01/13 09:35:58 fetching corpus: 1350, signal 119796/147093 (executing program) 2026/01/13 09:35:58 fetching corpus: 1400, signal 121206/149176 (executing program) 2026/01/13 09:35:58 fetching corpus: 1450, signal 122369/150968 (executing program) 2026/01/13 09:35:58 fetching corpus: 1500, signal 123333/152679 (executing program) 2026/01/13 09:35:58 fetching corpus: 1550, signal 125158/154968 (executing program) 2026/01/13 09:35:59 fetching corpus: 1600, signal 126576/156902 (executing program) 2026/01/13 09:35:59 fetching corpus: 1650, signal 128046/158840 (executing program) 2026/01/13 09:35:59 fetching corpus: 1700, signal 129465/160787 (executing program) 2026/01/13 09:35:59 fetching corpus: 1750, signal 130851/162619 (executing program) 2026/01/13 09:35:59 fetching corpus: 1800, signal 131947/164303 (executing program) 2026/01/13 09:35:59 fetching corpus: 1850, signal 133212/166042 (executing program) 2026/01/13 09:35:59 fetching corpus: 1900, signal 135648/168561 (executing program) 2026/01/13 09:35:59 fetching corpus: 1950, signal 136655/170085 (executing program) 2026/01/13 09:35:59 fetching corpus: 2000, signal 137579/171531 (executing program) 2026/01/13 09:36:00 fetching corpus: 2050, signal 138292/172854 (executing program) 2026/01/13 09:36:00 fetching corpus: 2100, signal 139207/174241 (executing program) 2026/01/13 09:36:00 fetching corpus: 2150, signal 140222/175700 (executing program) 2026/01/13 09:36:00 fetching corpus: 2200, signal 141335/177205 (executing program) 2026/01/13 09:36:00 fetching corpus: 2250, signal 142096/178489 (executing program) 2026/01/13 09:36:00 fetching corpus: 2300, signal 142711/179710 (executing program) 2026/01/13 09:36:00 fetching corpus: 2350, signal 143825/181148 (executing program) 2026/01/13 09:36:00 fetching corpus: 2400, signal 144792/182471 (executing program) 2026/01/13 09:36:01 fetching corpus: 2450, signal 145585/183689 (executing program) 2026/01/13 09:36:01 fetching corpus: 2500, signal 146253/184815 (executing program) 2026/01/13 09:36:01 fetching corpus: 2550, signal 147190/186083 (executing program) 2026/01/13 09:36:01 fetching corpus: 2600, signal 148074/187342 (executing program) 2026/01/13 09:36:01 fetching corpus: 2650, signal 148755/188455 (executing program) 2026/01/13 09:36:01 fetching corpus: 2700, signal 149306/189487 (executing program) 2026/01/13 09:36:01 fetching corpus: 2750, signal 150033/190701 (executing program) 2026/01/13 09:36:01 fetching corpus: 2800, signal 151073/191963 (executing program) 2026/01/13 09:36:01 fetching corpus: 2850, signal 151808/193056 (executing program) 2026/01/13 09:36:01 fetching corpus: 2900, signal 152495/194106 (executing program) 2026/01/13 09:36:02 fetching corpus: 2950, signal 153055/195076 (executing program) 2026/01/13 09:36:02 fetching corpus: 3000, signal 153649/196053 (executing program) 2026/01/13 09:36:02 fetching corpus: 3050, signal 154352/197103 (executing program) 2026/01/13 09:36:02 fetching corpus: 3100, signal 155161/198176 (executing program) 2026/01/13 09:36:02 fetching corpus: 3150, signal 155937/199179 (executing program) 2026/01/13 09:36:02 fetching corpus: 3200, signal 156901/200269 (executing program) 2026/01/13 09:36:02 fetching corpus: 3250, signal 157777/201318 (executing program) 2026/01/13 09:36:02 fetching corpus: 3300, signal 158454/202285 (executing program) 2026/01/13 09:36:03 fetching corpus: 3350, signal 159163/203267 (executing program) 2026/01/13 09:36:03 fetching corpus: 3400, signal 159860/204160 (executing program) 2026/01/13 09:36:03 fetching corpus: 3450, signal 160642/205132 (executing program) 2026/01/13 09:36:03 fetching corpus: 3500, signal 161234/206017 (executing program) 2026/01/13 09:36:03 fetching corpus: 3550, signal 161835/206932 (executing program) 2026/01/13 09:36:03 fetching corpus: 3600, signal 162392/207731 (executing program) 2026/01/13 09:36:03 fetching corpus: 3650, signal 162884/208599 (executing program) 2026/01/13 09:36:03 fetching corpus: 3700, signal 163626/209463 (executing program) 2026/01/13 09:36:03 fetching corpus: 3750, signal 164129/210276 (executing program) 2026/01/13 09:36:04 fetching corpus: 3800, signal 164618/211075 (executing program) 2026/01/13 09:36:04 fetching corpus: 3850, signal 165154/211850 (executing program) 2026/01/13 09:36:04 fetching corpus: 3900, signal 165720/212623 (executing program) 2026/01/13 09:36:04 fetching corpus: 3950, signal 166175/213361 (executing program) 2026/01/13 09:36:04 fetching corpus: 4000, signal 166737/214136 (executing program) 2026/01/13 09:36:04 fetching corpus: 4050, signal 167324/214888 (executing program) 2026/01/13 09:36:04 fetching corpus: 4100, signal 168210/215807 (executing program) 2026/01/13 09:36:04 fetching corpus: 4150, signal 168748/216544 (executing program) 2026/01/13 09:36:04 fetching corpus: 4200, signal 169318/217259 (executing program) 2026/01/13 09:36:05 fetching corpus: 4250, signal 169871/217942 (executing program) 2026/01/13 09:36:05 fetching corpus: 4300, signal 170431/218660 (executing program) 2026/01/13 09:36:05 fetching corpus: 4350, signal 170927/219353 (executing program) 2026/01/13 09:36:05 fetching corpus: 4400, signal 171581/220038 (executing program) 2026/01/13 09:36:05 fetching corpus: 4450, signal 172165/220674 (executing program) 2026/01/13 09:36:05 fetching corpus: 4500, signal 172632/221318 (executing program) 2026/01/13 09:36:05 fetching corpus: 4550, signal 173176/221958 (executing program) 2026/01/13 09:36:05 fetching corpus: 4600, signal 173633/222613 (executing program) 2026/01/13 09:36:06 fetching corpus: 4650, signal 174088/223208 (executing program) 2026/01/13 09:36:06 fetching corpus: 4700, signal 174579/223848 (executing program) 2026/01/13 09:36:06 fetching corpus: 4750, signal 175258/224491 (executing program) 2026/01/13 09:36:06 fetching corpus: 4800, signal 175694/225040 (executing program) 2026/01/13 09:36:06 fetching corpus: 4850, signal 176263/225673 (executing program) 2026/01/13 09:36:06 fetching corpus: 4900, signal 176738/226228 (executing program) 2026/01/13 09:36:06 fetching corpus: 4950, signal 177261/226808 (executing program) 2026/01/13 09:36:06 fetching corpus: 5000, signal 177682/227331 (executing program) 2026/01/13 09:36:06 fetching corpus: 5050, signal 178031/227890 (executing program) 2026/01/13 09:36:07 fetching corpus: 5100, signal 178660/228446 (executing program) 2026/01/13 09:36:07 fetching corpus: 5150, signal 179133/228983 (executing program) 2026/01/13 09:36:07 fetching corpus: 5200, signal 179617/229489 (executing program) 2026/01/13 09:36:07 fetching corpus: 5250, signal 180132/230029 (executing program) 2026/01/13 09:36:07 fetching corpus: 5300, signal 180614/230550 (executing program) 2026/01/13 09:36:07 fetching corpus: 5350, signal 181199/231056 (executing program) 2026/01/13 09:36:07 fetching corpus: 5400, signal 181647/231549 (executing program) 2026/01/13 09:36:07 fetching corpus: 5450, signal 182023/232044 (executing program) 2026/01/13 09:36:07 fetching corpus: 5500, signal 182796/232535 (executing program) 2026/01/13 09:36:08 fetching corpus: 5550, signal 183205/233007 (executing program) 2026/01/13 09:36:08 fetching corpus: 5600, signal 183683/233470 (executing program) 2026/01/13 09:36:08 fetching corpus: 5650, signal 184134/233929 (executing program) 2026/01/13 09:36:08 fetching corpus: 5700, signal 184499/234385 (executing program) 2026/01/13 09:36:08 fetching corpus: 5750, signal 185074/234812 (executing program) 2026/01/13 09:36:08 fetching corpus: 5800, signal 185433/235152 (executing program) 2026/01/13 09:36:08 fetching corpus: 5850, signal 185836/235152 (executing program) 2026/01/13 09:36:08 fetching corpus: 5900, signal 186104/235153 (executing program) 2026/01/13 09:36:08 fetching corpus: 5950, signal 186529/235153 (executing program) 2026/01/13 09:36:08 fetching corpus: 6000, signal 186909/235154 (executing program) 2026/01/13 09:36:09 fetching corpus: 6050, signal 187313/235154 (executing program) 2026/01/13 09:36:09 fetching corpus: 6100, signal 187735/235154 (executing program) 2026/01/13 09:36:09 fetching corpus: 6150, signal 188074/235154 (executing program) 2026/01/13 09:36:09 fetching corpus: 6200, signal 188400/235154 (executing program) 2026/01/13 09:36:09 fetching corpus: 6250, signal 188939/235155 (executing program) 2026/01/13 09:36:09 fetching corpus: 6300, signal 189326/235156 (executing program) 2026/01/13 09:36:09 fetching corpus: 6350, signal 189642/235156 (executing program) 2026/01/13 09:36:09 fetching corpus: 6400, signal 190163/235156 (executing program) 2026/01/13 09:36:10 fetching corpus: 6450, signal 190587/235156 (executing program) 2026/01/13 09:36:10 fetching corpus: 6500, signal 190934/235156 (executing program) 2026/01/13 09:36:10 fetching corpus: 6550, signal 191251/235156 (executing program) 2026/01/13 09:36:10 fetching corpus: 6600, signal 191609/235158 (executing program) 2026/01/13 09:36:10 fetching corpus: 6650, signal 191922/235158 (executing program) 2026/01/13 09:36:10 fetching corpus: 6700, signal 192391/235230 (executing program) 2026/01/13 09:36:10 fetching corpus: 6750, signal 192775/235230 (executing program) 2026/01/13 09:36:10 fetching corpus: 6800, signal 193071/235230 (executing program) 2026/01/13 09:36:11 fetching corpus: 6850, signal 193389/235230 (executing program) 2026/01/13 09:36:11 fetching corpus: 6900, signal 193714/235230 (executing program) 2026/01/13 09:36:11 fetching corpus: 6950, signal 194103/235230 (executing program) 2026/01/13 09:36:11 fetching corpus: 7000, signal 194368/235230 (executing program) 2026/01/13 09:36:11 fetching corpus: 7050, signal 194796/235231 (executing program) 2026/01/13 09:36:11 fetching corpus: 7100, signal 195110/235236 (executing program) 2026/01/13 09:36:11 fetching corpus: 7150, signal 195416/235236 (executing program) 2026/01/13 09:36:11 fetching corpus: 7200, signal 195716/235239 (executing program) 2026/01/13 09:36:11 fetching corpus: 7250, signal 196043/235243 (executing program) 2026/01/13 09:36:11 fetching corpus: 7300, signal 196328/235243 (executing program) 2026/01/13 09:36:11 fetching corpus: 7350, signal 196730/235243 (executing program) 2026/01/13 09:36:12 fetching corpus: 7400, signal 197113/235247 (executing program) 2026/01/13 09:36:12 fetching corpus: 7450, signal 197433/235247 (executing program) 2026/01/13 09:36:12 fetching corpus: 7500, signal 197725/235247 (executing program) 2026/01/13 09:36:12 fetching corpus: 7550, signal 198038/235247 (executing program) 2026/01/13 09:36:12 fetching corpus: 7600, signal 198461/235247 (executing program) 2026/01/13 09:36:12 fetching corpus: 7650, signal 198751/235256 (executing program) 2026/01/13 09:36:12 fetching corpus: 7700, signal 199112/235257 (executing program) 2026/01/13 09:36:12 fetching corpus: 7750, signal 199428/235257 (executing program) 2026/01/13 09:36:12 fetching corpus: 7800, signal 199849/235257 (executing program) 2026/01/13 09:36:13 fetching corpus: 7850, signal 200116/235257 (executing program) 2026/01/13 09:36:13 fetching corpus: 7900, signal 200652/235257 (executing program) 2026/01/13 09:36:13 fetching corpus: 7950, signal 201045/235257 (executing program) 2026/01/13 09:36:13 fetching corpus: 8000, signal 201337/235257 (executing program) 2026/01/13 09:36:13 fetching corpus: 8050, signal 201653/235257 (executing program) 2026/01/13 09:36:13 fetching corpus: 8100, signal 201950/235257 (executing program) 2026/01/13 09:36:13 fetching corpus: 8150, signal 202235/235257 (executing program) 2026/01/13 09:36:13 fetching corpus: 8200, signal 202713/235257 (executing program) 2026/01/13 09:36:13 fetching corpus: 8250, signal 203260/235258 (executing program) 2026/01/13 09:36:14 fetching corpus: 8300, signal 203549/235259 (executing program) 2026/01/13 09:36:14 fetching corpus: 8350, signal 203843/235259 (executing program) 2026/01/13 09:36:14 fetching corpus: 8400, signal 204203/235259 (executing program) 2026/01/13 09:36:14 fetching corpus: 8450, signal 204435/235259 (executing program) 2026/01/13 09:36:14 fetching corpus: 8500, signal 204948/235259 (executing program) 2026/01/13 09:36:14 fetching corpus: 8550, signal 205260/235259 (executing program) 2026/01/13 09:36:14 fetching corpus: 8600, signal 205608/235262 (executing program) 2026/01/13 09:36:14 fetching corpus: 8650, signal 205840/235262 (executing program) 2026/01/13 09:36:14 fetching corpus: 8700, signal 206071/235265 (executing program) 2026/01/13 09:36:15 fetching corpus: 8750, signal 206360/235265 (executing program) 2026/01/13 09:36:15 fetching corpus: 8800, signal 206674/235265 (executing program) 2026/01/13 09:36:15 fetching corpus: 8850, signal 206975/235265 (executing program) 2026/01/13 09:36:15 fetching corpus: 8900, signal 207262/235265 (executing program) 2026/01/13 09:36:15 fetching corpus: 8950, signal 208077/235265 (executing program) 2026/01/13 09:36:15 fetching corpus: 9000, signal 208421/235265 (executing program) 2026/01/13 09:36:15 fetching corpus: 9050, signal 208798/235265 (executing program) 2026/01/13 09:36:15 fetching corpus: 9100, signal 209173/235267 (executing program) 2026/01/13 09:36:15 fetching corpus: 9150, signal 209332/235267 (executing program) 2026/01/13 09:36:15 fetching corpus: 9200, signal 209569/235267 (executing program) 2026/01/13 09:36:16 fetching corpus: 9250, signal 209909/235267 (executing program) 2026/01/13 09:36:16 fetching corpus: 9300, signal 210281/235276 (executing program) 2026/01/13 09:36:16 fetching corpus: 9350, signal 210537/235278 (executing program) 2026/01/13 09:36:16 fetching corpus: 9400, signal 210834/235278 (executing program) 2026/01/13 09:36:16 fetching corpus: 9450, signal 211100/235278 (executing program) 2026/01/13 09:36:16 fetching corpus: 9500, signal 211396/235278 (executing program) 2026/01/13 09:36:16 fetching corpus: 9550, signal 211708/235280 (executing program) 2026/01/13 09:36:16 fetching corpus: 9600, signal 211979/235280 (executing program) 2026/01/13 09:36:17 fetching corpus: 9650, signal 212248/235280 (executing program) 2026/01/13 09:36:17 fetching corpus: 9700, signal 212553/235280 (executing program) 2026/01/13 09:36:17 fetching corpus: 9750, signal 212928/235280 (executing program) 2026/01/13 09:36:17 fetching corpus: 9800, signal 213194/235280 (executing program) 2026/01/13 09:36:17 fetching corpus: 9850, signal 213454/235281 (executing program) 2026/01/13 09:36:17 fetching corpus: 9900, signal 213713/235282 (executing program) 2026/01/13 09:36:17 fetching corpus: 9950, signal 214005/235282 (executing program) 2026/01/13 09:36:17 fetching corpus: 10000, signal 214308/235282 (executing program) 2026/01/13 09:36:18 fetching corpus: 10050, signal 214588/235282 (executing program) 2026/01/13 09:36:18 fetching corpus: 10100, signal 214910/235282 (executing program) 2026/01/13 09:36:18 fetching corpus: 10150, signal 215273/235284 (executing program) 2026/01/13 09:36:18 fetching corpus: 10200, signal 215521/235284 (executing program) 2026/01/13 09:36:18 fetching corpus: 10250, signal 215791/235284 (executing program) 2026/01/13 09:36:18 fetching corpus: 10300, signal 216035/235284 (executing program) 2026/01/13 09:36:18 fetching corpus: 10350, signal 216209/235284 (executing program) 2026/01/13 09:36:18 fetching corpus: 10400, signal 216433/235287 (executing program) 2026/01/13 09:36:18 fetching corpus: 10450, signal 216846/235290 (executing program) 2026/01/13 09:36:18 fetching corpus: 10500, signal 217172/235290 (executing program) 2026/01/13 09:36:18 fetching corpus: 10550, signal 217444/235290 (executing program) 2026/01/13 09:36:19 fetching corpus: 10600, signal 217697/235292 (executing program) 2026/01/13 09:36:19 fetching corpus: 10650, signal 217907/235295 (executing program) 2026/01/13 09:36:19 fetching corpus: 10700, signal 218175/235295 (executing program) 2026/01/13 09:36:19 fetching corpus: 10750, signal 218426/235303 (executing program) 2026/01/13 09:36:19 fetching corpus: 10800, signal 218710/235303 (executing program) 2026/01/13 09:36:19 fetching corpus: 10850, signal 219054/235303 (executing program) 2026/01/13 09:36:19 fetching corpus: 10900, signal 219298/235303 (executing program) 2026/01/13 09:36:19 fetching corpus: 10950, signal 219457/235303 (executing program) 2026/01/13 09:36:20 fetching corpus: 11000, signal 219612/235303 (executing program) 2026/01/13 09:36:20 fetching corpus: 11050, signal 219849/235303 (executing program) 2026/01/13 09:36:20 fetching corpus: 11100, signal 220055/235304 (executing program) 2026/01/13 09:36:20 fetching corpus: 11150, signal 220278/235304 (executing program) 2026/01/13 09:36:20 fetching corpus: 11200, signal 220531/235305 (executing program) 2026/01/13 09:36:20 fetching corpus: 11250, signal 220777/235326 (executing program) 2026/01/13 09:36:20 fetching corpus: 11300, signal 220906/235326 (executing program) 2026/01/13 09:36:20 fetching corpus: 11350, signal 221185/235326 (executing program) 2026/01/13 09:36:20 fetching corpus: 11400, signal 221433/235331 (executing program) 2026/01/13 09:36:20 fetching corpus: 11450, signal 221616/235331 (executing program) 2026/01/13 09:36:21 fetching corpus: 11500, signal 221796/235331 (executing program) 2026/01/13 09:36:21 fetching corpus: 11550, signal 221960/235331 (executing program) 2026/01/13 09:36:21 fetching corpus: 11600, signal 222215/235335 (executing program) 2026/01/13 09:36:21 fetching corpus: 11650, signal 222439/235335 (executing program) 2026/01/13 09:36:21 fetching corpus: 11700, signal 222678/235335 (executing program) 2026/01/13 09:36:21 fetching corpus: 11750, signal 222923/235335 (executing program) 2026/01/13 09:36:21 fetching corpus: 11800, signal 223115/235335 (executing program) 2026/01/13 09:36:21 fetching corpus: 11850, signal 223326/235338 (executing program) 2026/01/13 09:36:21 fetching corpus: 11900, signal 223613/235338 (executing program) 2026/01/13 09:36:22 fetching corpus: 11950, signal 223766/235338 (executing program) 2026/01/13 09:36:22 fetching corpus: 12000, signal 224083/235338 (executing program) 2026/01/13 09:36:22 fetching corpus: 12050, signal 224331/235339 (executing program) 2026/01/13 09:36:22 fetching corpus: 12100, signal 224581/235345 (executing program) 2026/01/13 09:36:22 fetching corpus: 12150, signal 224804/235345 (executing program) 2026/01/13 09:36:22 fetching corpus: 12200, signal 224972/235345 (executing program) 2026/01/13 09:36:22 fetching corpus: 12250, signal 225191/235345 (executing program) 2026/01/13 09:36:22 fetching corpus: 12300, signal 225389/235345 (executing program) 2026/01/13 09:36:22 fetching corpus: 12350, signal 225587/235345 (executing program) 2026/01/13 09:36:22 fetching corpus: 12400, signal 225766/235345 (executing program) 2026/01/13 09:36:23 fetching corpus: 12450, signal 226058/235345 (executing program) 2026/01/13 09:36:23 fetching corpus: 12500, signal 226254/235347 (executing program) 2026/01/13 09:36:23 fetching corpus: 12550, signal 226405/235347 (executing program) 2026/01/13 09:36:23 fetching corpus: 12600, signal 226659/235347 (executing program) 2026/01/13 09:36:23 fetching corpus: 12650, signal 226870/235347 (executing program) 2026/01/13 09:36:23 fetching corpus: 12700, signal 227104/235347 (executing program) 2026/01/13 09:36:23 fetching corpus: 12750, signal 227287/235352 (executing program) 2026/01/13 09:36:23 fetching corpus: 12800, signal 227495/235352 (executing program) 2026/01/13 09:36:23 fetching corpus: 12850, signal 227790/235352 (executing program) 2026/01/13 09:36:24 fetching corpus: 12900, signal 227997/235352 (executing program) 2026/01/13 09:36:24 fetching corpus: 12950, signal 228189/235354 (executing program) 2026/01/13 09:36:24 fetching corpus: 13000, signal 228877/235354 (executing program) 2026/01/13 09:36:24 fetching corpus: 13050, signal 229101/235354 (executing program) 2026/01/13 09:36:24 fetching corpus: 13100, signal 229298/235356 (executing program) 2026/01/13 09:36:24 fetching corpus: 13150, signal 229437/235356 (executing program) 2026/01/13 09:36:24 fetching corpus: 13200, signal 229644/235367 (executing program) 2026/01/13 09:36:24 fetching corpus: 13250, signal 229819/235367 (executing program) 2026/01/13 09:36:24 fetching corpus: 13300, signal 230009/235384 (executing program) 2026/01/13 09:36:24 fetching corpus: 13350, signal 230367/235384 (executing program) 2026/01/13 09:36:24 fetching corpus: 13400, signal 230561/235385 (executing program) 2026/01/13 09:36:25 fetching corpus: 13450, signal 230773/235385 (executing program) 2026/01/13 09:36:25 fetching corpus: 13500, signal 230955/235385 (executing program) 2026/01/13 09:36:25 fetching corpus: 13550, signal 231145/235385 (executing program) 2026/01/13 09:36:25 fetching corpus: 13600, signal 231416/235389 (executing program) 2026/01/13 09:36:25 fetching corpus: 13650, signal 231635/235389 (executing program) 2026/01/13 09:36:25 fetching corpus: 13700, signal 231803/235389 (executing program) 2026/01/13 09:36:25 fetching corpus: 13750, signal 231940/235390 (executing program) 2026/01/13 09:36:25 fetching corpus: 13800, signal 232149/235390 (executing program) 2026/01/13 09:36:25 fetching corpus: 13850, signal 232327/235390 (executing program) 2026/01/13 09:36:25 fetching corpus: 13900, signal 232506/235398 (executing program) 2026/01/13 09:36:26 fetching corpus: 13950, signal 232694/235398 (executing program) 2026/01/13 09:36:26 fetching corpus: 14000, signal 232912/235398 (executing program) 2026/01/13 09:36:26 fetching corpus: 14050, signal 233116/235400 (executing program) 2026/01/13 09:36:26 fetching corpus: 14100, signal 233288/235400 (executing program) 2026/01/13 09:36:26 fetching corpus: 14150, signal 233461/235406 (executing program) 2026/01/13 09:36:26 fetching corpus: 14200, signal 233644/235406 (executing program) 2026/01/13 09:36:26 fetching corpus: 14231, signal 233750/235406 (executing program) 2026/01/13 09:36:26 fetching corpus: 14231, signal 233750/235406 (executing program) 2026/01/13 09:36:28 starting 8 fuzzer processes 09:36:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) ppoll(&(0x7f0000000180)=[{r1}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 09:36:28 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000f100000008"], 0x0) 09:36:28 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff59, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x2400c0d1) 09:36:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x90}) [ 90.889865] audit: type=1400 audit(1768296988.280:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:36:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x81, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2}, 0x80, 0x9, 0x2e, 0x6, 0x8001, 0x4, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ac", 0x1, r1) dup(r0) keyctl$clear(0x7, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r2, r3, 0x0) keyctl$link(0x8, 0x0, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20040, 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(0xffffffffffffffff, r4, 0x0, 0xfdef) 09:36:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000080)) 09:36:28 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) 09:36:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) splice(r0, 0x0, r1, 0x0, 0x802, 0x0) [ 91.985727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.989193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.994609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.998963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.004691] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.049807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.052118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.056274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.059993] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.071355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.117714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.122396] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.125444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.127516] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.131979] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.133555] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.147557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.161243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.163296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.165053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.253587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.255256] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.258279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.261285] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.262799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.264188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.266772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.278570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.285890] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.288058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.288207] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.294269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.299708] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.301667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.308446] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.315671] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.340311] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.357153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.372747] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.374715] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.077867] Bluetooth: hci0: command tx timeout [ 94.142402] Bluetooth: hci1: command tx timeout [ 94.205146] Bluetooth: hci2: command tx timeout [ 94.206066] Bluetooth: hci3: command tx timeout [ 94.334109] Bluetooth: hci5: command tx timeout [ 94.397189] Bluetooth: hci7: command tx timeout [ 94.398384] Bluetooth: hci4: command tx timeout [ 94.398805] Bluetooth: hci6: command tx timeout [ 96.125154] Bluetooth: hci0: command tx timeout [ 96.189263] Bluetooth: hci1: command tx timeout [ 96.254090] Bluetooth: hci2: command tx timeout [ 96.254140] Bluetooth: hci3: command tx timeout [ 96.383137] Bluetooth: hci5: command tx timeout [ 96.446196] Bluetooth: hci7: command tx timeout [ 96.446956] Bluetooth: hci4: command tx timeout [ 96.447588] Bluetooth: hci6: command tx timeout [ 98.174103] Bluetooth: hci0: command tx timeout [ 98.238304] Bluetooth: hci1: command tx timeout [ 98.301129] Bluetooth: hci2: command tx timeout [ 98.301147] Bluetooth: hci3: command tx timeout [ 98.429692] Bluetooth: hci5: command tx timeout [ 98.493305] Bluetooth: hci4: command tx timeout [ 98.494153] Bluetooth: hci7: command tx timeout [ 98.494192] Bluetooth: hci6: command tx timeout [ 100.222093] Bluetooth: hci0: command tx timeout [ 100.287094] Bluetooth: hci1: command tx timeout [ 100.349050] Bluetooth: hci2: command tx timeout [ 100.349518] Bluetooth: hci3: command tx timeout [ 100.477907] Bluetooth: hci5: command tx timeout [ 100.541388] Bluetooth: hci6: command tx timeout [ 100.541403] Bluetooth: hci7: command tx timeout [ 100.542255] Bluetooth: hci4: command tx timeout [ 126.906429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.907141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.021330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.021945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:37:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) vmsplice(r0, &(0x7f0000001740)=[{0x0}, {0x0}, {&(0x7f0000001140)}, {0x0}, {&(0x7f0000001340)='T', 0x1}, {&(0x7f00000013c0)}, {&(0x7f00000014c0)}, {&(0x7f0000001580)}, {0x0}], 0x9, 0x0) [ 127.713410] audit: type=1400 audit(1768297025.104:8): avc: denied { open } for pid=3796 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.722123] audit: type=1400 audit(1768297025.111:9): avc: denied { kernel } for pid=3796 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:37:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) vmsplice(r0, &(0x7f0000001740)=[{0x0}, {0x0}, {&(0x7f0000001140)}, {0x0}, {&(0x7f0000001340)='T', 0x1}, {&(0x7f00000013c0)}, {&(0x7f00000014c0)}, {&(0x7f0000001580)}, {0x0}], 0x9, 0x0) 09:37:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) vmsplice(r0, &(0x7f0000001740)=[{0x0}, {0x0}, {&(0x7f0000001140)}, {0x0}, {&(0x7f0000001340)='T', 0x1}, {&(0x7f00000013c0)}, {&(0x7f00000014c0)}, {&(0x7f0000001580)}, {0x0}], 0x9, 0x0) [ 128.015885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.016504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.112186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.112784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:37:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) vmsplice(r0, &(0x7f0000001740)=[{0x0}, {0x0}, {&(0x7f0000001140)}, {0x0}, {&(0x7f0000001340)='T', 0x1}, {&(0x7f00000013c0)}, {&(0x7f00000014c0)}, {&(0x7f0000001580)}, {0x0}], 0x9, 0x0) [ 128.191360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.191998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:37:05 executing program 7: r0 = socket$inet(0x2, 0x80003, 0xff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="f5592464accf592f0000004c63062cae65f9ae84", 0x14}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev, @multicast1}}}], 0x20}}], 0x1, 0x0) 09:37:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000200)={0x1f00, 0xfdfdffff, 0x0}) [ 128.417540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.418183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:37:05 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0x519, 0x4) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="9aa4fe11ea04350680f3929bd9956cb02680205215215894b209077ab39e8996174bfc3f9f06bab49abc333fd7944c963a9ee2cdcd3cdd888389b975d50bedb6dc282195e4dfa73c5a9897d92d2e933ecce091b538ac583878b6f1450c82bb2c", 0x60}, {&(0x7f0000000140)="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", 0x48a}], 0x2}}], 0x1, 0x0) [ 128.518500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.519114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:37:05 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0x519, 0x4) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="9aa4fe11ea04350680f3929bd9956cb02680205215215894b209077ab39e8996174bfc3f9f06bab49abc333fd7944c963a9ee2cdcd3cdd888389b975d50bedb6dc282195e4dfa73c5a9897d92d2e933ecce091b538ac583878b6f1450c82bb2c", 0x60}, {&(0x7f0000000140)="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", 0x48a}], 0x2}}], 0x1, 0x0) [ 128.620681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.621297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.772189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.772817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.823132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.823706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.832229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.832782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.882352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.882949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.922470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.923078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.957642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.958537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.027074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.027699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.090394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.091228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:37:07 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0x519, 0x4) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="9aa4fe11ea04350680f3929bd9956cb02680205215215894b209077ab39e8996174bfc3f9f06bab49abc333fd7944c963a9ee2cdcd3cdd888389b975d50bedb6dc282195e4dfa73c5a9897d92d2e933ecce091b538ac583878b6f1450c82bb2c", 0x60}, {&(0x7f0000000140)="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", 0x48a}], 0x2}}], 0x1, 0x0) 09:37:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x81, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2}, 0x80, 0x9, 0x2e, 0x6, 0x8001, 0x4, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ac", 0x1, r1) dup(r0) keyctl$clear(0x7, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r2, r3, 0x0) keyctl$link(0x8, 0x0, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20040, 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(0xffffffffffffffff, r4, 0x0, 0xfdef) 09:37:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000000), 0x14) 09:37:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@time_offset={'time_offset', 0x3d, 0x2000}}]}) 09:37:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0xa, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x3, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 09:37:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) pwritev(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0xbf87, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x385, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000280)=""/220, 0xdc) 09:37:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0x519, 0x4) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="9aa4fe11ea04350680f3929bd9956cb02680205215215894b209077ab39e8996174bfc3f9f06bab49abc333fd7944c963a9ee2cdcd3cdd888389b975d50bedb6dc282195e4dfa73c5a9897d92d2e933ecce091b538ac583878b6f1450c82bb2c", 0x60}, {&(0x7f0000000140)="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", 0x48a}], 0x2}}], 0x1, 0x0) 09:37:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x90}) 09:37:07 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0x519, 0x4) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="9aa4fe11ea04350680f3929bd9956cb02680205215215894b209077ab39e8996174bfc3f9f06bab49abc333fd7944c963a9ee2cdcd3cdd888389b975d50bedb6dc282195e4dfa73c5a9897d92d2e933ecce091b538ac583878b6f1450c82bb2c", 0x60}, {&(0x7f0000000140)="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", 0x48a}], 0x2}}], 0x1, 0x0) 09:37:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x90}) 09:37:08 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000540)=0x8) 09:37:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000300)) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 09:37:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) pwritev(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0xbf87, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x385, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000280)=""/220, 0xdc) 09:37:08 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f00000003c0)={0x0}) 09:37:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x81, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2}, 0x80, 0x9, 0x2e, 0x6, 0x8001, 0x4, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ac", 0x1, r1) dup(r0) keyctl$clear(0x7, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r2, r3, 0x0) keyctl$link(0x8, 0x0, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20040, 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(0xffffffffffffffff, r4, 0x0, 0xfdef) 09:37:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0x519, 0x4) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="9aa4fe11ea04350680f3929bd9956cb02680205215215894b209077ab39e8996174bfc3f9f06bab49abc333fd7944c963a9ee2cdcd3cdd888389b975d50bedb6dc282195e4dfa73c5a9897d92d2e933ecce091b538ac583878b6f1450c82bb2c", 0x60}, {&(0x7f0000000140)="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", 0x48a}], 0x2}}], 0x1, 0x0) 09:37:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x90}) 09:37:08 executing program 7: rt_sigaction(0x0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000001d80)) 09:37:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000019140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000190c0)=ANY=[@ANYBLOB="1800000002010102000011ede3ffffff0000000504001980"], 0x18}}, 0x0) 09:37:08 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) 09:37:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}}, 0x0) 09:37:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0x519, 0x4) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="9aa4fe11ea04350680f3929bd9956cb02680205215215894b209077ab39e8996174bfc3f9f06bab49abc333fd7944c963a9ee2cdcd3cdd888389b975d50bedb6dc282195e4dfa73c5a9897d92d2e933ecce091b538ac583878b6f1450c82bb2c", 0x60}, {&(0x7f0000000140)="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", 0x48a}], 0x2}}], 0x1, 0x0) 09:37:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x81, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2}, 0x80, 0x9, 0x2e, 0x6, 0x8001, 0x4, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ac", 0x1, r1) dup(r0) keyctl$clear(0x7, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r2, r3, 0x0) keyctl$link(0x8, 0x0, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20040, 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(0xffffffffffffffff, r4, 0x0, 0xfdef) 09:37:09 executing program 5: syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 09:37:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newsa={0x14c, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private1, @in=@loopback}, {@in6=@mcast1, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "3c5dfa6b44580a10723498887adb7b7e88"}}]}, 0x14c}}, 0x0) 09:37:09 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) 09:37:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) pwritev(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0xbf87, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x385, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000280)=""/220, 0xdc) 09:37:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}}, 0x0) 09:37:09 executing program 0: r0 = fork() ptrace$setregset(0x4205, r0, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)="88191d8dc74f85d6c5cd2ec2008a1270d8591ba4a17dac5a41f2a013ffbcfdeb3d4385d3dbc1b386526dfc43660b00bc7487f30b4e24e4ab44ed6f8cc279af31b81e3387109673fbadca485eaf6ff28368f55c88b073d8bff7b44359d79973802060f99d798a73620ac22cf3689567a1728028128ad6d5ee880de3cea31585e247dfbb1a15cc9d20c26823fdfcd9882224469aa0747197a29c945de3fd01de5404022edd16181041d1973893355c", 0xae}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000180)={&(0x7f0000000140)="4c8056052d2e748624596e54fb162b449f0e4829c08e21f778bcad04caade452b82019eda4f334b141a1", 0x2a}, 0x1, 0x0, 0x0, 0x4}, 0x2000) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x40, 0x1}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x70) sendmsg$802154_dgram(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000740)={&(0x7f0000000640)="cbe3fceebc08cca8f2a40a91d9e475f68bda56e6dbef6fb7cc7873fffcf18778b8f52163149603fc3993465db1dcd46d7635571d2959258c450110a5b8954b7ae051494d2087a2bb6b62109bf03f22953a02058b6f5ae81e21b74aad65cb38f8bfbba41bfa2ae0316ea5ea26f751e9ac1125e075f4cddd9b110631b58f6beea54a13fe3dcfd74aba57d1b6486442dc4c4094ee82feb8470a13ff9b92a446c33c5eb8f2029de231b14b29eadcd8b3c4f7aba3a92e9328ccaa680260bf34433046ab193e021662f05789525d0112f5be6fe32e273ddd3f15f2e116cfd8201baa76992c6326bd4a769b1279", 0xea}, 0x1, 0x0, 0x0, 0x8010}, 0x40890) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}}, 0x810) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x49}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7527c9c063011ca1a21e1ec848"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xf, 0x4, "7d752e89dd6d401f92bd6c"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8011) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000890}, 0x20044010) 09:37:09 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) [ 132.121307] ieee802154 phy0 wpan0: encryption failed: -22 09:37:09 executing program 2: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x16, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1) [ 132.201796] ieee802154 phy0 wpan0: encryption failed: -22 09:37:09 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x3a}}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:37:09 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) 09:37:09 executing program 0: r0 = fork() ptrace$setregset(0x4205, r0, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)="88191d8dc74f85d6c5cd2ec2008a1270d8591ba4a17dac5a41f2a013ffbcfdeb3d4385d3dbc1b386526dfc43660b00bc7487f30b4e24e4ab44ed6f8cc279af31b81e3387109673fbadca485eaf6ff28368f55c88b073d8bff7b44359d79973802060f99d798a73620ac22cf3689567a1728028128ad6d5ee880de3cea31585e247dfbb1a15cc9d20c26823fdfcd9882224469aa0747197a29c945de3fd01de5404022edd16181041d1973893355c", 0xae}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000180)={&(0x7f0000000140)="4c8056052d2e748624596e54fb162b449f0e4829c08e21f778bcad04caade452b82019eda4f334b141a1", 0x2a}, 0x1, 0x0, 0x0, 0x4}, 0x2000) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x40, 0x1}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x70) sendmsg$802154_dgram(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000740)={&(0x7f0000000640)="cbe3fceebc08cca8f2a40a91d9e475f68bda56e6dbef6fb7cc7873fffcf18778b8f52163149603fc3993465db1dcd46d7635571d2959258c450110a5b8954b7ae051494d2087a2bb6b62109bf03f22953a02058b6f5ae81e21b74aad65cb38f8bfbba41bfa2ae0316ea5ea26f751e9ac1125e075f4cddd9b110631b58f6beea54a13fe3dcfd74aba57d1b6486442dc4c4094ee82feb8470a13ff9b92a446c33c5eb8f2029de231b14b29eadcd8b3c4f7aba3a92e9328ccaa680260bf34433046ab193e021662f05789525d0112f5be6fe32e273ddd3f15f2e116cfd8201baa76992c6326bd4a769b1279", 0xea}, 0x1, 0x0, 0x0, 0x8010}, 0x40890) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}}, 0x810) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x49}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7527c9c063011ca1a21e1ec848"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xf, 0x4, "7d752e89dd6d401f92bd6c"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8011) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000890}, 0x20044010) 09:37:09 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4c200300, 0x0, 0x0, 0x0, 0x0) 09:37:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) pwritev(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0xbf87, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x385, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000280)=""/220, 0xdc) 09:37:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:37:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) r2 = dup(r0) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) 09:37:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}}, 0x0) [ 132.512196] ieee802154 phy0 wpan0: encryption failed: -22 09:37:10 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) 09:37:10 executing program 4: r0 = gettid() setpriority(0x1, r0, 0x0) 09:37:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4c200300, 0x0, 0x0, 0x0, 0x0) 09:37:10 executing program 0: r0 = fork() ptrace$setregset(0x4205, r0, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)="88191d8dc74f85d6c5cd2ec2008a1270d8591ba4a17dac5a41f2a013ffbcfdeb3d4385d3dbc1b386526dfc43660b00bc7487f30b4e24e4ab44ed6f8cc279af31b81e3387109673fbadca485eaf6ff28368f55c88b073d8bff7b44359d79973802060f99d798a73620ac22cf3689567a1728028128ad6d5ee880de3cea31585e247dfbb1a15cc9d20c26823fdfcd9882224469aa0747197a29c945de3fd01de5404022edd16181041d1973893355c", 0xae}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000180)={&(0x7f0000000140)="4c8056052d2e748624596e54fb162b449f0e4829c08e21f778bcad04caade452b82019eda4f334b141a1", 0x2a}, 0x1, 0x0, 0x0, 0x4}, 0x2000) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x40, 0x1}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x70) sendmsg$802154_dgram(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000740)={&(0x7f0000000640)="cbe3fceebc08cca8f2a40a91d9e475f68bda56e6dbef6fb7cc7873fffcf18778b8f52163149603fc3993465db1dcd46d7635571d2959258c450110a5b8954b7ae051494d2087a2bb6b62109bf03f22953a02058b6f5ae81e21b74aad65cb38f8bfbba41bfa2ae0316ea5ea26f751e9ac1125e075f4cddd9b110631b58f6beea54a13fe3dcfd74aba57d1b6486442dc4c4094ee82feb8470a13ff9b92a446c33c5eb8f2029de231b14b29eadcd8b3c4f7aba3a92e9328ccaa680260bf34433046ab193e021662f05789525d0112f5be6fe32e273ddd3f15f2e116cfd8201baa76992c6326bd4a769b1279", 0xea}, 0x1, 0x0, 0x0, 0x8010}, 0x40890) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}}, 0x810) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x49}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7527c9c063011ca1a21e1ec848"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xf, 0x4, "7d752e89dd6d401f92bd6c"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8011) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000890}, 0x20044010) 09:37:10 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}}, 0x0) 09:37:10 executing program 3: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x8, 0x0, r1, 0x0}]) 09:37:10 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) 09:37:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:37:10 executing program 4: r0 = gettid() setpriority(0x1, r0, 0x0) 09:37:10 executing program 3: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x8, 0x0, r1, 0x0}]) 09:37:10 executing program 4: r0 = gettid() setpriority(0x1, r0, 0x0) [ 133.498835] ieee802154 phy0 wpan0: encryption failed: -22 09:37:10 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) 09:37:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000013c0), 0x4) 09:37:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:37:10 executing program 0: r0 = fork() ptrace$setregset(0x4205, r0, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)="88191d8dc74f85d6c5cd2ec2008a1270d8591ba4a17dac5a41f2a013ffbcfdeb3d4385d3dbc1b386526dfc43660b00bc7487f30b4e24e4ab44ed6f8cc279af31b81e3387109673fbadca485eaf6ff28368f55c88b073d8bff7b44359d79973802060f99d798a73620ac22cf3689567a1728028128ad6d5ee880de3cea31585e247dfbb1a15cc9d20c26823fdfcd9882224469aa0747197a29c945de3fd01de5404022edd16181041d1973893355c", 0xae}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000180)={&(0x7f0000000140)="4c8056052d2e748624596e54fb162b449f0e4829c08e21f778bcad04caade452b82019eda4f334b141a1", 0x2a}, 0x1, 0x0, 0x0, 0x4}, 0x2000) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x40, 0x1}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x70) sendmsg$802154_dgram(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000740)={&(0x7f0000000640)="cbe3fceebc08cca8f2a40a91d9e475f68bda56e6dbef6fb7cc7873fffcf18778b8f52163149603fc3993465db1dcd46d7635571d2959258c450110a5b8954b7ae051494d2087a2bb6b62109bf03f22953a02058b6f5ae81e21b74aad65cb38f8bfbba41bfa2ae0316ea5ea26f751e9ac1125e075f4cddd9b110631b58f6beea54a13fe3dcfd74aba57d1b6486442dc4c4094ee82feb8470a13ff9b92a446c33c5eb8f2029de231b14b29eadcd8b3c4f7aba3a92e9328ccaa680260bf34433046ab193e021662f05789525d0112f5be6fe32e273ddd3f15f2e116cfd8201baa76992c6326bd4a769b1279", 0xea}, 0x1, 0x0, 0x0, 0x8010}, 0x40890) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}}, 0x810) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x49}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7527c9c063011ca1a21e1ec848"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xf, 0x4, "7d752e89dd6d401f92bd6c"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8011) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000890}, 0x20044010) 09:37:11 executing program 4: r0 = gettid() setpriority(0x1, r0, 0x0) [ 133.688992] ieee802154 phy0 wpan0: encryption failed: -22 09:37:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4c200300, 0x0, 0x0, 0x0, 0x0) 09:37:11 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:37:11 executing program 3: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x8, 0x0, r1, 0x0}]) 09:37:11 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:37:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) 09:37:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r0, &(0x7f0000001040)='./file0\x00', 0x0, 0x0, 0x0) 09:37:11 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xe, r0, 0x0, &(0x7f00000009c0)) 09:37:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4c200300, 0x0, 0x0, 0x0, 0x0) 09:37:11 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) 09:37:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:37:11 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5327, 0x0) 09:37:11 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000400)="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", 0x801}], 0x1, 0x800, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) 09:37:11 executing program 3: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x8, 0x0, r1, 0x0}]) 09:37:11 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) 09:37:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) 09:37:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:37:11 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0xc5, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 09:37:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) 09:37:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) 09:37:11 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:37:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) 09:37:11 executing program 6: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/232, 0xe8}], 0x1) mq_timedsend(r1, &(0x7f0000000300)="31b45e22b7581936dec01a0b3b8c5b956e6c16615de74e00f40ce9d42c03162eacaabc865b2db5585691e83f335ee05cf4bbef707a66b7b7439ca69164ae12181e82bd115c9ffe9237a992d1b8bd4133718e87c5deb1f43210dfadde966e53", 0x5f, 0x73, &(0x7f0000000380)={0x0, 0x3938700}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = dup2(r0, r0) mq_notify(r3, &(0x7f0000000180)={0x0, 0x27, 0x1, @thr={&(0x7f0000000080)="f71805b6534b6dc1824f8abeb043b77dac6bd586c3fc0f13ea6a09d3fa17d5be6c964568513ebc8d593d45143b7c0a97c301de0f42f5ce1b2cc5ea3b0b77541f507036dc3fb9e340251e5814df700ccea47e4e07324e2176087122684f29aae2c6d7e82c69c80fc6b3f78e0cdfee50fb19ca4982877e1a9ce8e3acbf8608636764611d751442f08962213bcef6ce2220343c4daeb69128294c1026b9fab62bad8629e5aba0dd159892b9d9ab0ecdbf2e7bee9f557570987ff96666dba0f7aa4820c4b375b19a480421abfdfc751cc3599cd6b181364d078b95aae22f2c19b486fca664876377", &(0x7f0000000240)="f7c1cf8e8b5c85a94f354c3afc1c1c0486eb8cd59aa2001bb9e789b0eeeed172d2734f1f8d7c663c35f5c74bf95825fce53cf79cbc81c365e11114ae032cc7dd866b1253475999974d457257132807df6d4476ade62fa631f92e4045e714e8619e2e9e1e059c583f686a233539294c9c52bd265db7"}}) mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, r2+10000000}) 09:37:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) 09:37:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 09:37:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 09:37:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x5, 0x10000, 0x1, 0xff, 0x9}}, &(0x7f0000000580), 0x400) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="c791dcaf73c5eec5996765", @ANYBLOB="00022bbd7000fedbdf25680000001200c700c69ff601015c010004df5f66aa4f0ec51de3ff"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) [ 134.522714] random: crng reseeded on system resumption 09:37:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) 09:37:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, 0x0) 09:37:11 executing program 6: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/232, 0xe8}], 0x1) mq_timedsend(r1, &(0x7f0000000300)="31b45e22b7581936dec01a0b3b8c5b956e6c16615de74e00f40ce9d42c03162eacaabc865b2db5585691e83f335ee05cf4bbef707a66b7b7439ca69164ae12181e82bd115c9ffe9237a992d1b8bd4133718e87c5deb1f43210dfadde966e53", 0x5f, 0x73, &(0x7f0000000380)={0x0, 0x3938700}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = dup2(r0, r0) mq_notify(r3, &(0x7f0000000180)={0x0, 0x27, 0x1, @thr={&(0x7f0000000080)="f71805b6534b6dc1824f8abeb043b77dac6bd586c3fc0f13ea6a09d3fa17d5be6c964568513ebc8d593d45143b7c0a97c301de0f42f5ce1b2cc5ea3b0b77541f507036dc3fb9e340251e5814df700ccea47e4e07324e2176087122684f29aae2c6d7e82c69c80fc6b3f78e0cdfee50fb19ca4982877e1a9ce8e3acbf8608636764611d751442f08962213bcef6ce2220343c4daeb69128294c1026b9fab62bad8629e5aba0dd159892b9d9ab0ecdbf2e7bee9f557570987ff96666dba0f7aa4820c4b375b19a480421abfdfc751cc3599cd6b181364d078b95aae22f2c19b486fca664876377", &(0x7f0000000240)="f7c1cf8e8b5c85a94f354c3afc1c1c0486eb8cd59aa2001bb9e789b0eeeed172d2734f1f8d7c663c35f5c74bf95825fce53cf79cbc81c365e11114ae032cc7dd866b1253475999974d457257132807df6d4476ade62fa631f92e4045e714e8619e2e9e1e059c583f686a233539294c9c52bd265db7"}}) mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, r2+10000000}) 09:37:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x4, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x88) setxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000540), &(0x7f0000000040)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 09:37:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0xffffffffffffff27) [ 134.614125] process 'syz-executor.7' launched './file1' with NULL argv: empty string added [ 134.657518] random: crng reseeded on system resumption 09:37:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x4, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x88) setxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000540), &(0x7f0000000040)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 09:37:12 executing program 6: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/232, 0xe8}], 0x1) mq_timedsend(r1, &(0x7f0000000300)="31b45e22b7581936dec01a0b3b8c5b956e6c16615de74e00f40ce9d42c03162eacaabc865b2db5585691e83f335ee05cf4bbef707a66b7b7439ca69164ae12181e82bd115c9ffe9237a992d1b8bd4133718e87c5deb1f43210dfadde966e53", 0x5f, 0x73, &(0x7f0000000380)={0x0, 0x3938700}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = dup2(r0, r0) mq_notify(r3, &(0x7f0000000180)={0x0, 0x27, 0x1, @thr={&(0x7f0000000080)="f71805b6534b6dc1824f8abeb043b77dac6bd586c3fc0f13ea6a09d3fa17d5be6c964568513ebc8d593d45143b7c0a97c301de0f42f5ce1b2cc5ea3b0b77541f507036dc3fb9e340251e5814df700ccea47e4e07324e2176087122684f29aae2c6d7e82c69c80fc6b3f78e0cdfee50fb19ca4982877e1a9ce8e3acbf8608636764611d751442f08962213bcef6ce2220343c4daeb69128294c1026b9fab62bad8629e5aba0dd159892b9d9ab0ecdbf2e7bee9f557570987ff96666dba0f7aa4820c4b375b19a480421abfdfc751cc3599cd6b181364d078b95aae22f2c19b486fca664876377", &(0x7f0000000240)="f7c1cf8e8b5c85a94f354c3afc1c1c0486eb8cd59aa2001bb9e789b0eeeed172d2734f1f8d7c663c35f5c74bf95825fce53cf79cbc81c365e11114ae032cc7dd866b1253475999974d457257132807df6d4476ade62fa631f92e4045e714e8619e2e9e1e059c583f686a233539294c9c52bd265db7"}}) mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, r2+10000000}) [ 134.756664] loop5: detected capacity change from 0 to 264192 09:37:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240), 0x80880, 0x0) clone3(&(0x7f0000005880)={0x180, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r4 = dup(r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x37}) 09:37:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0xffffffffffffff27) 09:37:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, 0x0) 09:37:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x4, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x88) setxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000540), &(0x7f0000000040)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 09:37:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240), 0x80880, 0x0) clone3(&(0x7f0000005880)={0x180, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r4 = dup(r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x37}) 09:37:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0xffffffffffffff27) 09:37:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x4, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x88) setxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000540), &(0x7f0000000040)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 09:37:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240), 0x80880, 0x0) clone3(&(0x7f0000005880)={0x180, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r4 = dup(r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x37}) 09:37:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, 0x0) 09:37:12 executing program 6: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/232, 0xe8}], 0x1) mq_timedsend(r1, &(0x7f0000000300)="31b45e22b7581936dec01a0b3b8c5b956e6c16615de74e00f40ce9d42c03162eacaabc865b2db5585691e83f335ee05cf4bbef707a66b7b7439ca69164ae12181e82bd115c9ffe9237a992d1b8bd4133718e87c5deb1f43210dfadde966e53", 0x5f, 0x73, &(0x7f0000000380)={0x0, 0x3938700}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = dup2(r0, r0) mq_notify(r3, &(0x7f0000000180)={0x0, 0x27, 0x1, @thr={&(0x7f0000000080)="f71805b6534b6dc1824f8abeb043b77dac6bd586c3fc0f13ea6a09d3fa17d5be6c964568513ebc8d593d45143b7c0a97c301de0f42f5ce1b2cc5ea3b0b77541f507036dc3fb9e340251e5814df700ccea47e4e07324e2176087122684f29aae2c6d7e82c69c80fc6b3f78e0cdfee50fb19ca4982877e1a9ce8e3acbf8608636764611d751442f08962213bcef6ce2220343c4daeb69128294c1026b9fab62bad8629e5aba0dd159892b9d9ab0ecdbf2e7bee9f557570987ff96666dba0f7aa4820c4b375b19a480421abfdfc751cc3599cd6b181364d078b95aae22f2c19b486fca664876377", &(0x7f0000000240)="f7c1cf8e8b5c85a94f354c3afc1c1c0486eb8cd59aa2001bb9e789b0eeeed172d2734f1f8d7c663c35f5c74bf95825fce53cf79cbc81c365e11114ae032cc7dd866b1253475999974d457257132807df6d4476ade62fa631f92e4045e714e8619e2e9e1e059c583f686a233539294c9c52bd265db7"}}) mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, r2+10000000}) 09:37:12 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="18000380140003800c000180080001"], 0x38}}, 0x0) 09:37:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x5, 0x10000, 0x1, 0xff, 0x9}}, &(0x7f0000000580), 0x400) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="c791dcaf73c5eec5996765", @ANYBLOB="00022bbd7000fedbdf25680000001200c700c69ff601015c010004df5f66aa4f0ec51de3ff"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) [ 135.378674] loop5: detected capacity change from 0 to 264192 [ 135.395563] loop2: detected capacity change from 0 to 264192 09:37:12 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x5, 0x10000, 0x1, 0xff, 0x9}}, &(0x7f0000000580), 0x400) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="c791dcaf73c5eec5996765", @ANYBLOB="00022bbd7000fedbdf25680000001200c700c69ff601015c010004df5f66aa4f0ec51de3ff"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) 09:37:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240), 0x80880, 0x0) clone3(&(0x7f0000005880)={0x180, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r4 = dup(r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x37}) [ 135.499317] random: crng reseeded on system resumption 09:37:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0xffffffffffffff27) 09:37:12 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) dup2(r0, r1) 09:37:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240), 0x80880, 0x0) clone3(&(0x7f0000005880)={0x180, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r4 = dup(r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x37}) [ 135.572162] loop5: detected capacity change from 0 to 264192 [ 135.594356] random: crng reseeded on system resumption [ 135.657852] loop2: detected capacity change from 0 to 264192 09:37:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, 0x0) 09:37:13 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) dup2(r0, r1) 09:37:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x5, 0x10000, 0x1, 0xff, 0x9}}, &(0x7f0000000580), 0x400) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="c791dcaf73c5eec5996765", @ANYBLOB="00022bbd7000fedbdf25680000001200c700c69ff601015c010004df5f66aa4f0ec51de3ff"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) 09:37:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240), 0x80880, 0x0) clone3(&(0x7f0000005880)={0x180, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r4 = dup(r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x37}) 09:37:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x5, 0x10000, 0x1, 0xff, 0x9}}, &(0x7f0000000580), 0x400) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="c791dcaf73c5eec5996765", @ANYBLOB="00022bbd7000fedbdf25680000001200c700c69ff601015c010004df5f66aa4f0ec51de3ff"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) 09:37:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240), 0x80880, 0x0) clone3(&(0x7f0000005880)={0x180, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r4 = dup(r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x37}) 09:37:13 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x4b45, 0x3) [ 135.759634] perf: interrupt took too long (6279 > 6267), lowering kernel.perf_event_max_sample_rate to 31000 [ 135.761105] perf: interrupt took too long (6279 > 6267), lowering kernel.perf_event_max_sample_rate to 31000 09:37:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) [ 135.781970] random: crng reseeded on system resumption [ 135.782452] perf: interrupt took too long (7862 > 7848), lowering kernel.perf_event_max_sample_rate to 25000 [ 135.798439] perf: interrupt took too long (9855 > 9827), lowering kernel.perf_event_max_sample_rate to 20000 09:37:13 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) dup2(r0, r1) [ 135.876021] perf: interrupt took too long (12609 > 12318), lowering kernel.perf_event_max_sample_rate to 15000 09:37:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) 09:37:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x5, 0x10000, 0x1, 0xff, 0x9}}, &(0x7f0000000580), 0x400) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="c791dcaf73c5eec5996765", @ANYBLOB="00022bbd7000fedbdf25680000001200c700c69ff601015c010004df5f66aa4f0ec51de3ff"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) 09:37:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x5, 0x10000, 0x1, 0xff, 0x9}}, &(0x7f0000000580), 0x400) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="c791dcaf73c5eec5996765", @ANYBLOB="00022bbd7000fedbdf25680000001200c700c69ff601015c010004df5f66aa4f0ec51de3ff"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) [ 136.041914] random: crng reseeded on system resumption [ 136.087749] random: crng reseeded on system resumption 09:37:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 09:37:13 executing program 3: madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) munmap(&(0x7f0000874000/0x1000)=nil, 0x1000) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000086f000/0x2000)=nil) 09:37:13 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) dup2(r0, r1) 09:37:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) 09:37:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 09:37:13 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 09:37:13 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0) 09:37:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 09:37:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) io_setup(0xfff, 0x0) 09:37:13 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '^k?', 0x0, 0x6, 0x0, @mcast1, @mcast2, [], "c71e65e9654b7798"}}}}}}}, 0x0) 09:37:13 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) 09:37:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 09:37:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200)=0x101, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 09:37:13 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) [ 136.307766] blktrace: Concurrent blktraces are not allowed on sg0 09:37:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="5540523c0559", 0x0, 0x0, 0x0, 0x0, 0x0}) 09:37:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 09:37:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) 09:37:13 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) [ 136.426566] audit: type=1400 audit(1768297033.818:10): avc: denied { watch_reads } for pid=4284 comm="syz-executor.1" path="/syzkaller-testdir557662594/syzkaller.THvkaP/14/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1 09:37:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 09:37:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) io_setup(0xfff, 0x0) 09:37:14 executing program 6: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, 0x0) pkey_mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2, 0xffffffffffffffff) 09:37:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) 09:37:14 executing program 5: setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x41}) 09:37:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 09:37:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) 09:37:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x2, 0x0) 09:37:14 executing program 3: r0 = memfd_create(&(0x7f0000000280)='R^/\x00~\xf7\x15H\x83\x8fr\xcfh\xe3\xa3B\xd2\x8e\x95\xea\b\xa7\xe0\xe6\xac\xf2\x80[t\xc2\x0f\x11\x1eq\xb2\x05\xee\xcd6RA\x8165u \x93\xd1\xc1(\xcb\x03\xd0\xf4\x81\xf9/\xa14\xce\xd2\x89\x12\xc1\x85\x89(\xfa\xe7\xdc\x81\xbau\x1dj\xe4C\x14\xcc\x86\xf3\x12\x1b\x93\xf4\xf1e\a\v\x9c\x1b\x16z\xe3#\xea\x93\xc9U\xd3\x9a\xb6R\xcbz8\n\xdfp\x89\xe8T~\x82?\xe2\xf1\xe5\xb3\xe1C\xa8K\x8a`\xd4}cA\xa2=\x8a\xa4B\xc2X\xdc\x8d\xb9t\xd2\x97\xe5\xa2\x02G%\xc2r\x142\bZLj\x10N\x1ez\xe9M\xfc\xe6\xe4&?\x89fl\x19\x1b\x14\xe1\xcd\xca\xc0\xbd~\x99~\x13R<\xe6\xbd\xa1\x97\xf8\xb5\x00'/201, 0x0) ftruncate(r0, 0x8800000) r1 = syz_io_uring_setup(0x47c8, &(0x7f0000000180)={0x0, 0x4259}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close(r1) readv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x200000}], 0x2) [ 137.305157] blktrace: Concurrent blktraces are not allowed on sg0 09:37:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) io_setup(0xfff, 0x0) 09:37:14 executing program 6: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="9811b416240013000002000092675a9eed92a8c20c45248749b7df52000000ce92000000082af67a1bfa", 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r0, 0x2286, &(0x7f0000001400)) 09:37:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 09:37:14 executing program 5: setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x41}) 09:37:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'sha1-asm\x00'}}, 0x0, 0x0) [ 137.435386] blktrace: Concurrent blktraces are not allowed on sg0 09:37:14 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) 09:37:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) io_setup(0xfff, 0x0) 09:37:15 executing program 3: r0 = memfd_create(&(0x7f0000000280)='R^/\x00~\xf7\x15H\x83\x8fr\xcfh\xe3\xa3B\xd2\x8e\x95\xea\b\xa7\xe0\xe6\xac\xf2\x80[t\xc2\x0f\x11\x1eq\xb2\x05\xee\xcd6RA\x8165u \x93\xd1\xc1(\xcb\x03\xd0\xf4\x81\xf9/\xa14\xce\xd2\x89\x12\xc1\x85\x89(\xfa\xe7\xdc\x81\xbau\x1dj\xe4C\x14\xcc\x86\xf3\x12\x1b\x93\xf4\xf1e\a\v\x9c\x1b\x16z\xe3#\xea\x93\xc9U\xd3\x9a\xb6R\xcbz8\n\xdfp\x89\xe8T~\x82?\xe2\xf1\xe5\xb3\xe1C\xa8K\x8a`\xd4}cA\xa2=\x8a\xa4B\xc2X\xdc\x8d\xb9t\xd2\x97\xe5\xa2\x02G%\xc2r\x142\bZLj\x10N\x1ez\xe9M\xfc\xe6\xe4&?\x89fl\x19\x1b\x14\xe1\xcd\xca\xc0\xbd~\x99~\x13R<\xe6\xbd\xa1\x97\xf8\xb5\x00'/201, 0x0) ftruncate(r0, 0x8800000) r1 = syz_io_uring_setup(0x47c8, &(0x7f0000000180)={0x0, 0x4259}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close(r1) readv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x200000}], 0x2) 09:37:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'sha1-asm\x00'}}, 0x0, 0x0) 09:37:15 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xb, &(0x7f0000000000), 0x4) 09:37:15 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) 09:37:15 executing program 5: setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x41}) 09:37:15 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) 09:37:15 executing program 6: mknod$loop(&(0x7f0000000140)='./file1\x00', 0x1000, 0x1) acct(&(0x7f0000000000)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 09:37:15 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x68001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x39}) [ 137.700412] blktrace: Concurrent blktraces are not allowed on sg0 09:37:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'sha1-asm\x00'}}, 0x0, 0x0) 09:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 09:37:15 executing program 5: setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x41}) 09:37:15 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) 09:37:15 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x68001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x39}) [ 137.823431] [ 137.823749] ===================================== [ 137.824459] WARNING: bad unlock balance detected! [ 137.825156] 6.19.0-rc5-next-20260113 #1 Not tainted [ 137.825851] ------------------------------------- [ 137.826520] syz-executor.1/4347 is trying to release lock (rcu_read_lock) at: [ 137.830288] [] __wait_on_freeing_inode+0x105/0x350 [ 137.832959] but there are no more locks to release! [ 137.834912] [ 137.834912] other info that might help us debug this: [ 137.835833] 4 locks held by syz-executor.1/4347: [ 137.836511] #0: ffff88800f5363f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 137.837766] #1: ffff888048e13388 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 137.839183] #2: ffff88800f9e2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 137.840450] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 137.841743] [ 137.841743] stack backtrace: [ 137.842387] CPU: 0 UID: 0 PID: 4347 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 137.842413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 137.842425] Call Trace: [ 137.842432] [ 137.842439] dump_stack_lvl+0xca/0x120 [ 137.842464] ? __wait_on_freeing_inode+0x105/0x350 [ 137.842490] print_unlock_imbalance_bug+0x118/0x130 [ 137.842517] ? __wait_on_freeing_inode+0x105/0x350 [ 137.842544] lock_release+0x1ee/0x270 [ 137.842571] __wait_on_freeing_inode+0x10a/0x350 [ 137.842598] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 137.842627] ? __pfx_var_wake_function+0x10/0x10 [ 137.842659] ? lock_is_held_type+0x9e/0x120 [ 137.842679] insert_inode_locked+0x25f/0x890 [ 137.842710] __ext4_new_inode+0x223d/0x4cd0 [ 137.842741] ? __pfx___ext4_new_inode+0x10/0x10 [ 137.842767] ? __pfx___dquot_initialize+0x10/0x10 [ 137.842800] ? __pfx_avc_has_perm+0x10/0x10 [ 137.842828] ext4_symlink+0x406/0xb40 [ 137.842862] ? __pfx_ext4_symlink+0x10/0x10 [ 137.842892] ? security_inode_permission+0x72/0xe0 [ 137.842915] vfs_symlink+0x44b/0x840 [ 137.842945] do_symlinkat+0x153/0x440 [ 137.842970] ? __pfx_do_symlinkat+0x10/0x10 [ 137.842994] ? strncpy_from_user+0x21b/0x2f0 [ 137.843026] __x64_sys_symlink+0x79/0xa0 [ 137.843051] do_syscall_64+0xbf/0x420 [ 137.843075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.843096] RIP: 0033:0x7fbcf8777427 [ 137.843112] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.843131] RSP: 002b:00007ffd00527ea8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 137.843151] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbcf8777427 [ 137.843164] RDX: 00007ffd00527f83 RSI: 00007fbcf87d2022 RDI: 00007ffd00527f70 [ 137.843177] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd00527d40 [ 137.843189] R10: 00007ffd00527bf7 R11: 0000000000000202 R12: 0000000000000001 [ 137.843202] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd00527f70 [ 137.843220] [ 137.871551] ------------[ cut here ]------------ [ 137.916878] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.1/4347 [ 137.983749] Modules linked in: [ 137.984817] CPU: 0 UID: 0 PID: 4347 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 138.026705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 138.067188] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 138.067978] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 138.168990] RSP: 0018:ffff888049ddf9a0 EFLAGS: 00010286 [ 138.179478] RAX: 00000000ffffffff RBX: ffff888048321b80 RCX: ffffffff815664c7 [ 138.180764] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff888048321f7c [ 138.181715] RBP: ffff888048321b80 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 138.182746] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888048321b80 [ 138.183681] R13: 0000000000000001 R14: ffffffff85c0cf70 R15: ffff888048e13c48 [ 138.184638] FS: 0000555572b82400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 138.185686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.186463] CR2: 0000555572b82708 CR3: 000000000db05000 CR4: 0000000000350ef0 [ 138.187410] Call Trace: [ 138.187782] [ 138.188824] __wait_on_freeing_inode+0x10f/0x350 [ 138.189893] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 138.191559] ? __pfx_var_wake_function+0x10/0x10 [ 138.193451] ? lock_is_held_type+0x9e/0x120 [ 138.195147] insert_inode_locked+0x25f/0x890 [ 138.197581] __ext4_new_inode+0x223d/0x4cd0 [ 138.201289] ? __pfx___ext4_new_inode+0x10/0x10 [ 138.203151] ? __pfx___dquot_initialize+0x10/0x10 [ 138.204326] ? __pfx_avc_has_perm+0x10/0x10 [ 138.206944] ext4_symlink+0x406/0xb40 [ 138.210332] ? __pfx_ext4_symlink+0x10/0x10 [ 138.211825] ? security_inode_permission+0x72/0xe0 [ 138.214366] vfs_symlink+0x44b/0x840 [ 138.216275] do_symlinkat+0x153/0x440 [ 138.217873] ? __pfx_do_symlinkat+0x10/0x10 [ 138.218948] ? strncpy_from_user+0x21b/0x2f0 [ 138.221744] __x64_sys_symlink+0x79/0xa0 [ 138.222837] do_syscall_64+0xbf/0x420 [ 138.224102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.224869] RIP: 0033:0x7fbcf8777427 [ 138.225479] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.227720] RSP: 002b:00007ffd00527ea8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 138.228699] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbcf8777427 [ 138.229630] RDX: 00007ffd00527f83 RSI: 00007fbcf87d2022 RDI: 00007ffd00527f70 [ 138.230539] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd00527d40 [ 138.231451] R10: 00007ffd00527bf7 R11: 0000000000000202 R12: 0000000000000001 [ 138.232365] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd00527f70 [ 138.236164] [ 138.236462] irq event stamp: 267 [ 138.236865] hardirqs last enabled at (267): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 138.238128] hardirqs last disabled at (266): [] _raw_spin_lock_irqsave+0x53/0x60 [ 138.239341] softirqs last enabled at (262): [] kernel_fpu_end+0x59/0x70 [ 138.240479] softirqs last disabled at (260): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 138.241696] ---[ end trace 0000000000000000 ]--- 09:37:15 executing program 0: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000040)) 09:37:15 executing program 3: r0 = memfd_create(&(0x7f0000000280)='R^/\x00~\xf7\x15H\x83\x8fr\xcfh\xe3\xa3B\xd2\x8e\x95\xea\b\xa7\xe0\xe6\xac\xf2\x80[t\xc2\x0f\x11\x1eq\xb2\x05\xee\xcd6RA\x8165u \x93\xd1\xc1(\xcb\x03\xd0\xf4\x81\xf9/\xa14\xce\xd2\x89\x12\xc1\x85\x89(\xfa\xe7\xdc\x81\xbau\x1dj\xe4C\x14\xcc\x86\xf3\x12\x1b\x93\xf4\xf1e\a\v\x9c\x1b\x16z\xe3#\xea\x93\xc9U\xd3\x9a\xb6R\xcbz8\n\xdfp\x89\xe8T~\x82?\xe2\xf1\xe5\xb3\xe1C\xa8K\x8a`\xd4}cA\xa2=\x8a\xa4B\xc2X\xdc\x8d\xb9t\xd2\x97\xe5\xa2\x02G%\xc2r\x142\bZLj\x10N\x1ez\xe9M\xfc\xe6\xe4&?\x89fl\x19\x1b\x14\xe1\xcd\xca\xc0\xbd~\x99~\x13R<\xe6\xbd\xa1\x97\xf8\xb5\x00'/201, 0x0) ftruncate(r0, 0x8800000) r1 = syz_io_uring_setup(0x47c8, &(0x7f0000000180)={0x0, 0x4259}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close(r1) readv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x200000}], 0x2) 09:37:15 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0xe}}) 09:37:15 executing program 3: r0 = memfd_create(&(0x7f0000000280)='R^/\x00~\xf7\x15H\x83\x8fr\xcfh\xe3\xa3B\xd2\x8e\x95\xea\b\xa7\xe0\xe6\xac\xf2\x80[t\xc2\x0f\x11\x1eq\xb2\x05\xee\xcd6RA\x8165u \x93\xd1\xc1(\xcb\x03\xd0\xf4\x81\xf9/\xa14\xce\xd2\x89\x12\xc1\x85\x89(\xfa\xe7\xdc\x81\xbau\x1dj\xe4C\x14\xcc\x86\xf3\x12\x1b\x93\xf4\xf1e\a\v\x9c\x1b\x16z\xe3#\xea\x93\xc9U\xd3\x9a\xb6R\xcbz8\n\xdfp\x89\xe8T~\x82?\xe2\xf1\xe5\xb3\xe1C\xa8K\x8a`\xd4}cA\xa2=\x8a\xa4B\xc2X\xdc\x8d\xb9t\xd2\x97\xe5\xa2\x02G%\xc2r\x142\bZLj\x10N\x1ez\xe9M\xfc\xe6\xe4&?\x89fl\x19\x1b\x14\xe1\xcd\xca\xc0\xbd~\x99~\x13R<\xe6\xbd\xa1\x97\xf8\xb5\x00'/201, 0x0) ftruncate(r0, 0x8800000) r1 = syz_io_uring_setup(0x47c8, &(0x7f0000000180)={0x0, 0x4259}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close(r1) readv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x200000}], 0x2) 09:37:15 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x68001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x39}) 09:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 09:37:15 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000100)=[0x3], 0x0, 0x0) 09:37:15 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0xe}}) 09:37:15 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x68001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x39}) 09:37:15 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) 09:37:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'sha1-asm\x00'}}, 0x0, 0x0) 09:37:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)) 09:37:15 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0xe}}) 09:37:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 09:37:15 executing program 1: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 09:37:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541b, &(0x7f0000000080)) [ 138.508306] mmap: syz-executor.1 (4391) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 09:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 09:37:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000005040)={0x0, 0x7, &(0x7f0000005000)={&(0x7f0000004fc0)={0x1c, r1, 0xd44fcdaefa3b3e37, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 09:37:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x541a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a716b444ce87eab8b2969dc2f4ddf86f1da25e"}) 09:37:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0xe}}) 09:37:16 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, &(0x7f00000000c0), 0x401, 0x0) 09:37:16 executing program 7: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = gettid() r1 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4000}) 09:37:16 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9205, 0x0) 09:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 09:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 09:37:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x339, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x180}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 09:37:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541b, &(0x7f0000000080)) 09:37:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x1c}}, 0x0) 09:37:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 09:37:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) 09:37:16 executing program 5: syz_emit_ethernet(0x70, &(0x7f0000000080)={@broadcast, @random="08bd00e6d648", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8570cc", 0x3a, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "e8199c", 0x0, 0x0, 0x0, @private0, @loopback, [@hopopts={0x2c}], 'vV'}}}}}}}, 0x0) 09:37:16 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "38b15880951680e4a54d9c59bd3c58d014e76b9a488c547e05a45b661f7bb9ab75ea1084dfbb5ec89a3cce1dc1bc34576ba90620742959a2850dc8c15f55cde6", "895a2006cf63bf2fb77e199579f29c9e75a46e2600395cda97f0b90f840886d8f39adfab3eae7ddad25af1d2b70bc9715362adef217b2c0eb8f2467e18dfb6e0", "1965d981ca6d7b8db4cbc3bd284c18894c0d801c58974504146311d657cd2096"}) 09:37:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541b, &(0x7f0000000080)) 09:37:16 executing program 4: r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="e0", 0x1, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/10, 0xa) 09:37:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x1c}}, 0x0) [ 138.777932] loop1: detected capacity change from 0 to 512 09:37:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000001080)=0x3, 0x4) [ 138.797873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 09:37:16 executing program 7: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002900000000000029000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed000000000000ed66001c0000000000001c00080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c00210000000000002164000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e", 0x130, 0xe000}, {&(0x7f0000011a00)="4552ed", 0x3, 0x10000}], 0x0, &(0x7f0000012200)) statx(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) [ 138.831589] loop7: detected capacity change from 0 to 256 [ 138.834674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.835739] ISO 9660 Extensions: Microsoft Joliet Level 0 [ 138.837265] ISO 9660 Extensions: 09:37:16 executing program 4: r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="e0", 0x1, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/10, 0xa) 09:37:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) [ 138.882499] loop1: detected capacity change from 0 to 512 [ 138.889815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 09:37:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:37:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) 09:37:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x20, 0x10, 0x201, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 09:37:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541b, &(0x7f0000000080)) 09:37:16 executing program 7: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000001c0), 0x8) 09:37:16 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x33ba, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000000040)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x13, &(0x7f00000001c0), 0x2) 09:37:16 executing program 4: r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="e0", 0x1, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/10, 0xa) 09:37:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x1c}}, 0x0) [ 138.941240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 09:37:16 executing program 4: r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="e0", 0x1, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/10, 0xa) [ 139.016214] loop1: detected capacity change from 0 to 512 [ 139.027319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.041296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 09:37:16 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockname(r0, 0x0, &(0x7f00000003c0)) 09:37:16 executing program 5: prctl$PR_SET_MM(0x29, 0x7, &(0x7f0000ffa000/0x4000)=nil) 09:37:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:37:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) 09:37:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x40011) recvmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:37:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x1c}}, 0x0) 09:37:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) 09:37:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) [ 139.090976] loop1: detected capacity change from 0 to 512 [ 139.099414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 09:37:16 executing program 5: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x27) 09:37:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) 09:37:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x0, 0x8d}, @timestamp, @mss, @window, @mss, @sack_perm, @timestamp, @sack_perm], 0x8) 09:37:16 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x13, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 09:37:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:37:16 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') 09:37:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 09:37:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005500f9ffff7f00200000000007"], 0x1c}], 0x1}, 0x0) 09:37:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) [ 139.255875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.263716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.264824] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.269309] hugetlbfs: Unknown parameter './file0' 09:37:17 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x13, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 09:37:17 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:37:17 executing program 6: r0 = gettid() capget(&(0x7f0000000080)={0x19980330, r0}, &(0x7f00000000c0)) 09:37:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9208, 0x0) 09:37:17 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300)) 09:37:17 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB]) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 09:37:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) close_range(r1, r2, 0x2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r3, 0x0, r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:37:17 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$sndseq(0xffffffffffffff9c, &(0x7f0000003180), 0x0) [ 139.961716] capability: warning: `syz-executor.6' uses 32-bit capabilities (legacy support in use) [ 139.967652] loop0: detected capacity change from 0 to 136 [ 139.976226] ISOFS: Unable to identify CD-ROM format. [ 139.981609] loop0: detected capacity change from 0 to 136 09:37:17 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x13, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 139.986321] ISOFS: Unable to identify CD-ROM format. 09:37:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @private}}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @private}}) 09:37:17 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000002200)) 09:37:17 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x13, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 09:37:17 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300)) 09:37:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) 09:37:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000001000)) 09:37:17 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:37:17 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 140.095124] loop0: detected capacity change from 0 to 136 [ 140.102658] ISOFS: Unable to identify CD-ROM format. 09:37:17 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000002200)) 09:37:17 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:37:17 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300)) 09:37:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) close_range(r1, r2, 0x2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r3, 0x0, r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:37:17 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x17, &(0x7f0000000040)="61635299", 0x4) 09:37:17 executing program 7: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r0) timer_create(0x9, 0x0, &(0x7f00000007c0)) 09:37:17 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3304) 09:37:17 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 140.198689] loop0: detected capacity change from 0 to 136 [ 140.208415] ISOFS: Unable to identify CD-ROM format. 09:37:17 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:37:17 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000002200)) 09:37:17 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300)) 09:37:17 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:37:17 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541d, 0x0) 09:37:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) [ 140.283467] loop0: detected capacity change from 0 to 136 [ 140.290127] ISOFS: Unable to identify CD-ROM format. [ 141.076419] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.076944] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.078941] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.080049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.080477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.081397] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.082694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.083215] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.084378] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.086276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.086695] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.087764] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.094313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.094747] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.095844] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.097274] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 141.097702] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 141.098590] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 141.110737] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 141.111222] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 141.112729] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 141.113714] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 141.114957] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 141.138121] Bluetooth: hci7: Opcode 0x0406 failed: -4 09:37:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000002200)) 09:37:18 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b70000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000700000014000300ff02000000000000000000000000000114ea"], 0x3c}}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x68}}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000000c0)='\x04') 09:37:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(0x0, 0x0) 09:37:18 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) close_range(r1, r2, 0x2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r3, 0x0, r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:37:18 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff04, 0x0) 09:37:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() 09:37:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) 09:37:18 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) read(r2, &(0x7f00000016c0)=""/110, 0x6e) write$binfmt_aout(r1, 0x0, 0x0) 09:37:18 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 09:37:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @broadcast}}) 09:37:18 executing program 6: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@generic={0x88f7}}}, 0x0) 09:37:18 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x7fffffff) 09:37:18 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001100)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x3}, @queue}], 0x1c) 09:37:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000001c0)='./file1\x00') mkdirat(r0, &(0x7f0000000240)='\x00', 0x28) 09:37:18 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) read(r2, &(0x7f00000016c0)=""/110, 0x6e) write$binfmt_aout(r1, 0x0, 0x0) [ 141.296125] EXT4-fs warning (device sda): ext4_block_to_path:105: block 2147483647 > max in inode 16003 [ 141.298055] EXT4-fs warning (device sda): ext4_block_to_path:105: block 2147483647 > max in inode 16003 09:37:18 executing program 4: uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x70aa, &(0x7f0000000000)={0x0, 0x3124, 0x4, 0x0, 0x248}) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1d}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x99) 09:37:18 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x7) lseek(r0, 0x0, 0x3) 09:37:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 09:37:18 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) 09:37:18 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) close_range(r1, r2, 0x2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r3, 0x0, r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:37:18 executing program 4: uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x70aa, &(0x7f0000000000)={0x0, 0x3124, 0x4, 0x0, 0x248}) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1d}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x99) 09:37:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000001c0)='./file1\x00') mkdirat(r0, &(0x7f0000000240)='\x00', 0x28) 09:37:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() 09:37:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') timerfd_gettime(r0, 0x0) 09:37:18 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) read(r2, &(0x7f00000016c0)=""/110, 0x6e) write$binfmt_aout(r1, 0x0, 0x0) 09:37:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="91", 0x1, r1) keyctl$chown(0x4, r2, 0x0, 0x0) 09:37:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@fat=@codepage={'codepage', 0x3d, '862'}}]}) 09:37:18 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="67ea8efae2a16b8d4d002001040009001f"], 0x20}}, 0x0) 09:37:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() 09:37:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="91", 0x1, r1) keyctl$chown(0x4, r2, 0x0, 0x0) [ 141.524613] No source specified [ 141.528831] No source specified 09:37:18 executing program 2: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x401c5820, 0x0) 09:37:18 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) read(r2, &(0x7f00000016c0)=""/110, 0x6e) write$binfmt_aout(r1, 0x0, 0x0) 09:37:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() 09:37:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x45, &(0x7f0000000000)=0x9, 0x4) 09:37:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000001c0)='./file1\x00') mkdirat(r0, &(0x7f0000000240)='\x00', 0x28) 09:37:19 executing program 4: uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x70aa, &(0x7f0000000000)={0x0, 0x3124, 0x4, 0x0, 0x248}) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1d}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x99) 09:37:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000640)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x99027, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000001c0)='./file1\x00') mkdirat(r0, &(0x7f0000000240)='\x00', 0x28) 09:37:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@rodir}, {@rodir}, {@shortname_win95}, {@utf8no}, {@numtail}, {@shortname_mixed}, {@fat=@umask}, {@shortname_win95}]}) 09:37:19 executing program 3: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0) 09:37:19 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}}], 0xff2f) 09:37:19 executing program 4: uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x70aa, &(0x7f0000000000)={0x0, 0x3124, 0x4, 0x0, 0x248}) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1d}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x99) 09:37:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="91", 0x1, r1) keyctl$chown(0x4, r2, 0x0, 0x0) 09:37:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) 09:37:19 executing program 7: futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) 09:37:19 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) [ 141.853787] No source specified [ 141.858072] No source specified 09:37:19 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x1220}], 0x1, 0x0, 0x0, 0x0) 09:37:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000540)=0x1e, 0x4) 09:37:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x26, &(0x7f00000003c0)={@link_local, @remote, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @multicast}}}}, 0x0) 09:37:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, 0x0) 09:37:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/226) 09:37:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="91", 0x1, r1) keyctl$chown(0x4, r2, 0x0, 0x0) 09:37:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x1000e, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 09:37:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "9bd070", 0x18, 0x6, 0x0, @mcast2, @mcast2, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1}}}}}}}}, 0x0) 09:37:19 executing program 2: mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffffffff) 09:37:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='timerslack_ns\x00') write$P9_RSYMLINK(r0, 0x0, 0x10) 09:37:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}]]}, 0x2c}}, 0x0) 09:37:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x1000e, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 09:37:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}]]}, 0x2c}}, 0x0) 09:37:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="260000000001"]}) 09:37:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/226) [ 142.205869] Bluetooth: hci0: command 0x0c1a tx timeout 09:37:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 09:37:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000002d00ff08000000000000b8440400008004000080bd48f1dd83646a490da238800400000028000a"], 0xe0}], 0x1}, 0x0) 09:37:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}]]}, 0x2c}}, 0x0) 09:37:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x1000e, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 143.101178] Bluetooth: hci5: command 0x0c1a tx timeout [ 143.101819] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.102157] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.103112] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.103146] Bluetooth: hci1: command 0x0c1a tx timeout 09:37:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/226) 09:37:20 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)=@chain) 09:37:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x1000e, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 09:37:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 09:37:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}]]}, 0x2c}}, 0x0) 09:37:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}], 0x0, &(0x7f0000012900)) 09:37:20 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x12, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 09:37:20 executing program 5: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) [ 143.166054] Bluetooth: hci7: command 0x0c1a tx timeout [ 143.167069] Bluetooth: hci6: command 0x0c1a tx timeout [ 143.200286] loop4: detected capacity change from 0 to 512 [ 143.203794] No source specified [ 143.210465] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz-executor.4: iget: special inode unallocated [ 143.211887] No source specified [ 143.212597] EXT4-fs (loop4): get root inode failed [ 143.213179] EXT4-fs (loop4): mount failed [ 143.225806] loop4: detected capacity change from 0 to 512 09:37:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8902, &(0x7f0000002bc0)) 09:37:20 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)=@chain) 09:37:20 executing program 5: syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x35, 0x33, 0x39, 0x39, 0x33, 0x35, 0x30, 0x32, 0x33, 0x30]}}}}]}) [ 143.267199] tmpfs: Bad value for 'mpol' [ 143.270544] tmpfs: Bad value for 'mpol' 09:37:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x941382, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8) 09:37:20 executing program 6: pselect6(0x2a, 0x0, &(0x7f000000c680), 0x0, &(0x7f000000c700)={0x0, 0x3938700}, &(0x7f000000c780)={&(0x7f000000c740), 0x8}) 09:37:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/226) 09:37:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 09:37:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="a0", 0x1}], 0x1}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:37:20 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)=@chain) 09:37:20 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000055000100000000200000000007"], 0x1c}], 0x1}, 0x0) 09:37:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0305302, &(0x7f00000000c0)) [ 143.406248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 09:37:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$inet(r0, 0x0, &(0x7f00000002c0)) 09:37:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r0, &(0x7f0000000000)=""/233, 0xe9, 0x0) 09:37:21 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff09, 0x0) 09:37:21 executing program 6: pselect6(0x2a, 0x0, &(0x7f000000c680), 0x0, &(0x7f000000c700)={0x0, 0x3938700}, &(0x7f000000c780)={&(0x7f000000c740), 0x8}) 09:37:21 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)=@chain) 09:37:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 09:37:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0305302, &(0x7f00000000c0)) 09:37:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6c, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) [ 144.077375] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 09:37:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 09:37:21 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xee00) 09:37:21 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000280)) 09:37:21 executing program 6: pselect6(0x2a, 0x0, &(0x7f000000c680), 0x0, &(0x7f000000c700)={0x0, 0x3938700}, &(0x7f000000c780)={&(0x7f000000c740), 0x8}) 09:37:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) 09:37:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0305302, &(0x7f00000000c0)) [ 144.253085] Bluetooth: hci0: command 0x0c1a tx timeout 09:37:21 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000280)) 09:37:21 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 09:37:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 09:37:21 executing program 6: pselect6(0x2a, 0x0, &(0x7f000000c680), 0x0, &(0x7f000000c700)={0x0, 0x3938700}, &(0x7f000000c780)={&(0x7f000000c740), 0x8}) 09:37:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 09:37:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000280)) 09:37:22 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "04ab8c631d1ed89d85d5700a9854c015c57866d12f8c4083c9ef8a53459e6212be880572caf1053176bb76741d2ea9c5c1d09984ff85b3cc5b55a97760fe08ba", "eeb7bf56c0a921d2c550ce7002a15e806bef62e30feb07113ad5d508ecff0203439da75bcdc4c2effae638ae5be74c726405238fc32edd298b6101330e0b4143", "d4bc0bf633918ff0d2efb93b73f43eb7d02cc9481028d8ef07c6bd6a2787ebea"}) 09:37:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 09:37:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0305302, &(0x7f00000000c0)) 09:37:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 09:37:22 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x5, 0x0, 0x8}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:37:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) 09:37:22 executing program 7: semctl$GETVAL(0x0, 0x0, 0xc, 0x0) 09:37:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000280)) 09:37:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) 09:37:22 executing program 7: futex(&(0x7f0000000040)=0x1, 0x86, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) 09:37:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 145.149323] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.150256] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.151135] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.151702] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.151888] Bluetooth: hci5: command 0x0c1a tx timeout 09:37:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001500)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 145.213075] Bluetooth: hci7: command 0x0c1a tx timeout [ 145.213884] Bluetooth: hci6: command 0x0c1a tx timeout [ 145.221858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.222726] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.224193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.224949] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 09:37:22 executing program 6: creat(&(0x7f0000000100)='./file0\x00', 0x835465967ef20ce5) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000280)='./file0\x00', 0x0, 0xee01) setresuid(0x0, r2, 0x0) sendfile(r0, r1, 0x0, 0x20000) 09:37:22 executing program 7: futex(&(0x7f0000000040)=0x1, 0x86, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) [ 145.301242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.302142] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 145.303461] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 145.304558] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 145.305665] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 145.306742] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 145.307830] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 145.308923] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 145.310038] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 145.311124] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 145.312242] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 145.313328] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 145.314760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.315568] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 145.320865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.321796] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 145.323506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.324386] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 145.331097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.331939] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 145.335367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.338074] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 145.348077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.348880] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 145.350865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.351961] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 145.355615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.356809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.361538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.362733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.380702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.382257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.390615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.391707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.411658] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 145.414341] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 145.416701] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 145.418977] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 09:37:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 09:37:23 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043eaf0da7e4"], 0x1b2) 09:37:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x33820a0, &(0x7f00000006c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x34]}}]}) 09:37:23 executing program 7: futex(&(0x7f0000000040)=0x1, 0x86, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) 09:37:23 executing program 6: prlimit64(0x0, 0x8, &(0x7f0000000040), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 09:37:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) 09:37:23 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 145.918694] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260 [ 145.918728] Bluetooth: hci7: unexpected subevent 0x0d length: 430 > 260 [ 145.921054] Bluetooth: hci7: Malformed LE Event: 0x0d [ 145.922724] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260 [ 145.922750] Bluetooth: hci7: unexpected subevent 0x0d length: 430 > 260 [ 145.924691] Bluetooth: hci7: Malformed LE Event: 0x0d 09:37:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) syz_emit_ethernet(0xb1, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x453d, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, @payload_named={{{{{0x29, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, [0x0]}}}}}, 0x0) 09:37:23 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:37:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000012c0)) 09:37:23 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) flock(r1, 0x1) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup2(r2, r0) 09:37:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:37:23 executing program 7: futex(&(0x7f0000000040)=0x1, 0x86, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) 09:37:23 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x44, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x28, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x44}}, 0x0) 09:37:23 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:37:23 executing program 5: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x140241, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='3', 0x1}]) 09:37:23 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') pread64(r0, &(0x7f0000000100)=""/229, 0xe5, 0x0) 09:37:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) syz_emit_ethernet(0xb1, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x453d, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, @payload_named={{{{{0x29, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, [0x0]}}}}}, 0x0) 09:37:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) write(r0, 0x0, 0x0) 09:37:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 146.238508] PM: Enabling pm_trace changes system date and time during resume. [ 146.238508] PM: Correct system time has to be restored manually after resume. 09:37:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000180001c2b4c0a60000000000020000801400000101"], 0x28}], 0x1}, 0x0) 09:37:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) syz_emit_ethernet(0xb1, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x453d, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, @payload_named={{{{{0x29, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, [0x0]}}}}}, 0x0) [ 146.302721] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.312654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 09:37:23 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)={0x24, 0x66, 0x101, 0x0, 0x0, "", [@generic="4ce41fcf604d7c6825107d23e2bdb36fba"]}, 0x24}], 0x1}, 0x0) 09:37:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') read(r0, &(0x7f0000000200)=""/110, 0x6e) 09:37:23 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:37:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40084502, 0x0) 09:37:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000180001c2b4c0a60000000000020000801400000101"], 0x28}], 0x1}, 0x0) 09:37:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) syz_emit_ethernet(0xb1, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x453d, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, @payload_named={{{{{0x29, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, [0x0]}}}}}, 0x0) 09:37:23 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) io_setup(0x200, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000480)="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", 0x200}]) 09:37:23 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 146.455952] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 09:37:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000180001c2b4c0a60000000000020000801400000101"], 0x28}], 0x1}, 0x0) [ 146.503339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.504132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.544136] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.557141] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 146.558813] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 146.567101] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 146.568185] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 146.594903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.599455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.619798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.621763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.629635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.630754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.636120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.637237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.646870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.648618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.653619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.655507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.663425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.664542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.666391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.668436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.690848] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 146.692131] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 146.709094] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 146.712110] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fe 00 00 0a 00 [ 146.776749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 146.814392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:37:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x80000000) 09:37:24 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:37:24 executing program 5: r0 = socket(0xa, 0x3, 0x6) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@phonet={0xa}, 0x80) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x40001002) 09:37:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000180001c2b4c0a60000000000020000801400000101"], 0x28}], 0x1}, 0x0) 09:37:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 09:37:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2800000066000102", @ANYRES32, @ANYRES64, @ANYRES64=r0], 0x28}], 0x1}, 0x0) 09:37:24 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xc116}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@random="05d4142e3316", @device_b, @device_b}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) r2 = dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 09:37:24 executing program 2: clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:37:24 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) io_setup(0x200, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000480)="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", 0x200}]) [ 146.855934] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.904205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:37:24 executing program 5: r0 = socket(0xa, 0x3, 0x6) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@phonet={0xa}, 0x80) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x40001002) 09:37:24 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) io_setup(0x200, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000480)="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", 0x200}]) 09:37:24 executing program 7: syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', 0x0, 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000300)="de", 0x1, 0xffffffff80000001}], 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b40)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001b00)={&(0x7f0000000600)=@phonet, 0x80, &(0x7f0000001980)=[{&(0x7f0000000680)=""/203, 0xcb}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/146, 0x92}, {&(0x7f0000001840)=""/17, 0x11}, {&(0x7f0000001880)=""/253, 0xfd}], 0x5, &(0x7f0000001a00)=""/207, 0xcf}, 0x0, 0x40000000, 0x0, {0x3}}, 0xeb) openat$autofs(0xffffffffffffff9c, &(0x7f0000001d40), 0x101040, 0x0) [ 146.970412] loop7: detected capacity change from 0 to 81920 [ 147.016550] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 147.017356] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 147.017926] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 147.024058] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 147.076672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.079166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.123961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.124682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.134954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.135692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.143970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.145634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.152973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.154633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.160927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.161589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.168326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.168957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.174981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.175865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.182354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.182997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 147.196501] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 147.197319] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.197769] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.198232] Bluetooth: hci5: command 0x0c1a tx timeout [ 147.198660] Bluetooth: hci4: command 0x0c1a tx timeout [ 147.199114] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.202537] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 147.205891] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 147.209986] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fe 00 00 0a 00 [ 147.262073] Bluetooth: hci6: command 0x0c1a tx timeout [ 147.262595] Bluetooth: hci7: command 0x0c1a tx timeout 09:37:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc70185e5ab9213cf, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 09:37:24 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xb4ce6, &(0x7f0000009300)={[], [{@uid_eq}]}) 09:37:24 executing program 5: r0 = socket(0xa, 0x3, 0x6) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@phonet={0xa}, 0x80) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x40001002) 09:37:24 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) 09:37:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) 09:37:24 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) io_setup(0x200, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000480)="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", 0x200}]) 09:37:24 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKTRACESTART(r0, 0xc01070ce, 0x0) 09:37:24 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x306144, 0x0) 09:37:24 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xc116}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@random="05d4142e3316", @device_b, @device_b}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, VM DIAGNOSIS: 09:37:15 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff888049ddf488 R8 =0000000000000001 R9 =ffffed10093bbe87 R10=0000000000000000 R11=6666666666663c5b R12=0000000000000000 R13=ffffffff889c1a10 R14=ffffffff889c19c0 R15=ffffffff889c1c80 RIP=ffffffff82977f9d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555572b82400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555572b82708 CR3=000000000db05000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=0000000000000002 RCX=ffffffff86a4372c RDX=0000000000000000 RSI=ffffffff8135f952 RDI=ffff888016c6bafc RBP=ffff888016c6b700 RSP=ffff88806cf089c0 R8 =ffffffff86a43730 R9 =ffff88806cf08aa0 R10=000000000003d1bb R11=000000000000887a R12=ffff888016c6b700 R13=ffff88806cf08aa8 R14=ffff88806cf08ff8 R15=ffff88806cf08a60 RIP=ffffffff815d760b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558ca86400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555aca8708 CR3=000000000b7ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000