Warning: Permanently added '[localhost]:15956' (ECDSA) to the list of known hosts.
2026/01/15 09:24:44 fuzzer started
2026/01/15 09:24:44 dialing manager at localhost:35245
syzkaller login: [   43.227056] cgroup: Unknown subsys name 'net'
[   43.295258] cgroup: Unknown subsys name 'cpuset'
[   43.308735] cgroup: Unknown subsys name 'rlimit'
2026/01/15 09:24:54 syscalls: 2214
2026/01/15 09:24:54 code coverage: enabled
2026/01/15 09:24:54 comparison tracing: enabled
2026/01/15 09:24:54 extra coverage: enabled
2026/01/15 09:24:54 setuid sandbox: enabled
2026/01/15 09:24:54 namespace sandbox: enabled
2026/01/15 09:24:54 Android sandbox: enabled
2026/01/15 09:24:54 fault injection: enabled
2026/01/15 09:24:54 leak checking: enabled
2026/01/15 09:24:54 net packet injection: enabled
2026/01/15 09:24:54 net device setup: enabled
2026/01/15 09:24:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/15 09:24:54 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/15 09:24:54 USB emulation: enabled
2026/01/15 09:24:54 hci packet injection: enabled
2026/01/15 09:24:54 wifi device emulation: enabled
2026/01/15 09:24:54 802.15.4 emulation: enabled
2026/01/15 09:24:54 fetching corpus: 0, signal 0/2000 (executing program)
2026/01/15 09:24:54 fetching corpus: 49, signal 19704/23345 (executing program)
2026/01/15 09:24:54 fetching corpus: 99, signal 39842/44795 (executing program)
2026/01/15 09:24:54 fetching corpus: 149, signal 48570/54860 (executing program)
2026/01/15 09:24:54 fetching corpus: 199, signal 55203/62766 (executing program)
2026/01/15 09:24:54 fetching corpus: 249, signal 58860/67704 (executing program)
2026/01/15 09:24:54 fetching corpus: 299, signal 65623/75513 (executing program)
2026/01/15 09:24:55 fetching corpus: 349, signal 69013/80115 (executing program)
2026/01/15 09:24:55 fetching corpus: 399, signal 72766/84967 (executing program)
2026/01/15 09:24:55 fetching corpus: 449, signal 76893/90095 (executing program)
2026/01/15 09:24:55 fetching corpus: 499, signal 79143/93450 (executing program)
2026/01/15 09:24:55 fetching corpus: 549, signal 83138/98295 (executing program)
2026/01/15 09:24:55 fetching corpus: 599, signal 85931/102066 (executing program)
2026/01/15 09:24:55 fetching corpus: 649, signal 89345/106308 (executing program)
2026/01/15 09:24:55 fetching corpus: 699, signal 91573/109469 (executing program)
2026/01/15 09:24:56 fetching corpus: 749, signal 94938/113552 (executing program)
2026/01/15 09:24:56 fetching corpus: 799, signal 96892/116411 (executing program)
2026/01/15 09:24:56 fetching corpus: 849, signal 98291/118746 (executing program)
2026/01/15 09:24:56 fetching corpus: 899, signal 101880/122895 (executing program)
2026/01/15 09:24:56 fetching corpus: 949, signal 103583/125450 (executing program)
2026/01/15 09:24:56 fetching corpus: 999, signal 104993/127713 (executing program)
2026/01/15 09:24:56 fetching corpus: 1049, signal 106178/129779 (executing program)
2026/01/15 09:24:56 fetching corpus: 1099, signal 107441/131899 (executing program)
2026/01/15 09:24:56 fetching corpus: 1149, signal 108866/134047 (executing program)
2026/01/15 09:24:57 fetching corpus: 1199, signal 111585/137199 (executing program)
2026/01/15 09:24:57 fetching corpus: 1249, signal 112725/139183 (executing program)
2026/01/15 09:24:57 fetching corpus: 1299, signal 115243/142109 (executing program)
2026/01/15 09:24:57 fetching corpus: 1349, signal 117348/144730 (executing program)
2026/01/15 09:24:57 fetching corpus: 1399, signal 119269/147174 (executing program)
2026/01/15 09:24:57 fetching corpus: 1449, signal 120779/149242 (executing program)
2026/01/15 09:24:57 fetching corpus: 1499, signal 122215/151234 (executing program)
2026/01/15 09:24:57 fetching corpus: 1549, signal 123529/153088 (executing program)
2026/01/15 09:24:57 fetching corpus: 1599, signal 124800/154923 (executing program)
2026/01/15 09:24:57 fetching corpus: 1649, signal 125980/156657 (executing program)
2026/01/15 09:24:58 fetching corpus: 1699, signal 127156/158409 (executing program)
2026/01/15 09:24:58 fetching corpus: 1749, signal 128684/160363 (executing program)
2026/01/15 09:24:58 fetching corpus: 1799, signal 129530/161832 (executing program)
2026/01/15 09:24:58 fetching corpus: 1849, signal 130558/163418 (executing program)
2026/01/15 09:24:58 fetching corpus: 1899, signal 131925/165204 (executing program)
2026/01/15 09:24:58 fetching corpus: 1949, signal 133073/166772 (executing program)
2026/01/15 09:24:58 fetching corpus: 1999, signal 133989/168208 (executing program)
2026/01/15 09:24:58 fetching corpus: 2049, signal 135003/169697 (executing program)
2026/01/15 09:24:58 fetching corpus: 2099, signal 135816/171086 (executing program)
2026/01/15 09:24:58 fetching corpus: 2149, signal 136551/172337 (executing program)
2026/01/15 09:24:59 fetching corpus: 2199, signal 137809/173871 (executing program)
2026/01/15 09:24:59 fetching corpus: 2249, signal 138834/175265 (executing program)
2026/01/15 09:24:59 fetching corpus: 2299, signal 140188/176868 (executing program)
2026/01/15 09:24:59 fetching corpus: 2349, signal 140931/178075 (executing program)
2026/01/15 09:24:59 fetching corpus: 2399, signal 141779/179342 (executing program)
2026/01/15 09:24:59 fetching corpus: 2449, signal 142542/180571 (executing program)
2026/01/15 09:24:59 fetching corpus: 2499, signal 143439/181831 (executing program)
2026/01/15 09:24:59 fetching corpus: 2549, signal 144175/182999 (executing program)
2026/01/15 09:24:59 fetching corpus: 2599, signal 146084/184744 (executing program)
2026/01/15 09:24:59 fetching corpus: 2649, signal 146742/185863 (executing program)
2026/01/15 09:25:00 fetching corpus: 2699, signal 147177/186836 (executing program)
2026/01/15 09:25:00 fetching corpus: 2749, signal 147727/187784 (executing program)
2026/01/15 09:25:00 fetching corpus: 2799, signal 148369/188819 (executing program)
2026/01/15 09:25:00 fetching corpus: 2849, signal 149019/189855 (executing program)
2026/01/15 09:25:00 fetching corpus: 2899, signal 149659/190898 (executing program)
2026/01/15 09:25:00 fetching corpus: 2949, signal 150214/191865 (executing program)
2026/01/15 09:25:00 fetching corpus: 2999, signal 150900/192912 (executing program)
2026/01/15 09:25:00 fetching corpus: 3049, signal 151490/193895 (executing program)
2026/01/15 09:25:00 fetching corpus: 3099, signal 151983/194812 (executing program)
2026/01/15 09:25:00 fetching corpus: 3149, signal 152739/195794 (executing program)
2026/01/15 09:25:00 fetching corpus: 3199, signal 153428/196807 (executing program)
2026/01/15 09:25:01 fetching corpus: 3249, signal 154138/197790 (executing program)
2026/01/15 09:25:01 fetching corpus: 3299, signal 154944/198782 (executing program)
2026/01/15 09:25:01 fetching corpus: 3349, signal 155723/199783 (executing program)
2026/01/15 09:25:01 fetching corpus: 3399, signal 156272/200667 (executing program)
2026/01/15 09:25:01 fetching corpus: 3449, signal 157157/201663 (executing program)
2026/01/15 09:25:01 fetching corpus: 3499, signal 157728/202482 (executing program)
2026/01/15 09:25:01 fetching corpus: 3549, signal 158570/203454 (executing program)
2026/01/15 09:25:01 fetching corpus: 3598, signal 159116/204304 (executing program)
2026/01/15 09:25:01 fetching corpus: 3648, signal 160059/205265 (executing program)
2026/01/15 09:25:01 fetching corpus: 3698, signal 160729/206123 (executing program)
2026/01/15 09:25:02 fetching corpus: 3748, signal 161619/206992 (executing program)
2026/01/15 09:25:02 fetching corpus: 3798, signal 162051/207761 (executing program)
2026/01/15 09:25:02 fetching corpus: 3848, signal 162558/208514 (executing program)
2026/01/15 09:25:02 fetching corpus: 3898, signal 163298/209319 (executing program)
2026/01/15 09:25:02 fetching corpus: 3948, signal 163836/210040 (executing program)
2026/01/15 09:25:02 fetching corpus: 3998, signal 164315/210731 (executing program)
2026/01/15 09:25:02 fetching corpus: 4048, signal 164791/211495 (executing program)
2026/01/15 09:25:02 fetching corpus: 4098, signal 165780/212315 (executing program)
2026/01/15 09:25:03 fetching corpus: 4148, signal 166494/213069 (executing program)
2026/01/15 09:25:03 fetching corpus: 4198, signal 167369/213834 (executing program)
2026/01/15 09:25:03 fetching corpus: 4248, signal 168109/214567 (executing program)
2026/01/15 09:25:03 fetching corpus: 4298, signal 168802/215281 (executing program)
2026/01/15 09:25:03 fetching corpus: 4348, signal 169399/216028 (executing program)
2026/01/15 09:25:03 fetching corpus: 4398, signal 169852/216656 (executing program)
2026/01/15 09:25:03 fetching corpus: 4448, signal 170629/217355 (executing program)
2026/01/15 09:25:03 fetching corpus: 4498, signal 171369/218039 (executing program)
2026/01/15 09:25:03 fetching corpus: 4548, signal 171876/218628 (executing program)
2026/01/15 09:25:04 fetching corpus: 4598, signal 172461/219265 (executing program)
2026/01/15 09:25:04 fetching corpus: 4648, signal 172907/219838 (executing program)
2026/01/15 09:25:04 fetching corpus: 4698, signal 173450/220440 (executing program)
2026/01/15 09:25:04 fetching corpus: 4748, signal 173792/221007 (executing program)
2026/01/15 09:25:04 fetching corpus: 4798, signal 174456/221631 (executing program)
2026/01/15 09:25:04 fetching corpus: 4848, signal 174807/222174 (executing program)
2026/01/15 09:25:04 fetching corpus: 4898, signal 175237/222716 (executing program)
2026/01/15 09:25:04 fetching corpus: 4948, signal 175549/223218 (executing program)
2026/01/15 09:25:04 fetching corpus: 4998, signal 176209/223779 (executing program)
2026/01/15 09:25:05 fetching corpus: 5048, signal 176693/224281 (executing program)
2026/01/15 09:25:05 fetching corpus: 5097, signal 177191/224799 (executing program)
2026/01/15 09:25:05 fetching corpus: 5147, signal 177601/225328 (executing program)
2026/01/15 09:25:05 fetching corpus: 5196, signal 178074/225823 (executing program)
2026/01/15 09:25:05 fetching corpus: 5246, signal 178510/226311 (executing program)
2026/01/15 09:25:05 fetching corpus: 5296, signal 178987/226789 (executing program)
2026/01/15 09:25:05 fetching corpus: 5346, signal 179417/227303 (executing program)
2026/01/15 09:25:05 fetching corpus: 5396, signal 179935/227750 (executing program)
2026/01/15 09:25:05 fetching corpus: 5446, signal 180718/228206 (executing program)
2026/01/15 09:25:06 fetching corpus: 5496, signal 181158/228666 (executing program)
2026/01/15 09:25:06 fetching corpus: 5546, signal 181658/229142 (executing program)
2026/01/15 09:25:06 fetching corpus: 5596, signal 182040/229578 (executing program)
2026/01/15 09:25:06 fetching corpus: 5646, signal 182430/229973 (executing program)
2026/01/15 09:25:06 fetching corpus: 5696, signal 182748/230351 (executing program)
2026/01/15 09:25:06 fetching corpus: 5746, signal 183227/230351 (executing program)
2026/01/15 09:25:06 fetching corpus: 5796, signal 183708/230351 (executing program)
2026/01/15 09:25:06 fetching corpus: 5846, signal 183885/230351 (executing program)
2026/01/15 09:25:06 fetching corpus: 5896, signal 185111/230352 (executing program)
2026/01/15 09:25:06 fetching corpus: 5946, signal 185420/230352 (executing program)
2026/01/15 09:25:07 fetching corpus: 5996, signal 185923/230360 (executing program)
2026/01/15 09:25:07 fetching corpus: 6046, signal 186417/230361 (executing program)
2026/01/15 09:25:07 fetching corpus: 6096, signal 186761/230361 (executing program)
2026/01/15 09:25:07 fetching corpus: 6146, signal 187204/230361 (executing program)
2026/01/15 09:25:07 fetching corpus: 6196, signal 187563/230361 (executing program)
2026/01/15 09:25:07 fetching corpus: 6246, signal 187831/230371 (executing program)
2026/01/15 09:25:07 fetching corpus: 6296, signal 188343/230371 (executing program)
2026/01/15 09:25:07 fetching corpus: 6346, signal 188673/230381 (executing program)
2026/01/15 09:25:07 fetching corpus: 6396, signal 188903/230386 (executing program)
2026/01/15 09:25:08 fetching corpus: 6446, signal 189247/230386 (executing program)
2026/01/15 09:25:08 fetching corpus: 6496, signal 189657/230387 (executing program)
2026/01/15 09:25:08 fetching corpus: 6546, signal 189989/230401 (executing program)
2026/01/15 09:25:08 fetching corpus: 6596, signal 190383/230410 (executing program)
2026/01/15 09:25:08 fetching corpus: 6646, signal 190738/230434 (executing program)
2026/01/15 09:25:08 fetching corpus: 6696, signal 191335/230434 (executing program)
2026/01/15 09:25:08 fetching corpus: 6746, signal 191738/230440 (executing program)
2026/01/15 09:25:08 fetching corpus: 6796, signal 192115/230440 (executing program)
2026/01/15 09:25:08 fetching corpus: 6846, signal 192421/230455 (executing program)
2026/01/15 09:25:08 fetching corpus: 6896, signal 192823/230461 (executing program)
2026/01/15 09:25:09 fetching corpus: 6946, signal 193234/230461 (executing program)
2026/01/15 09:25:09 fetching corpus: 6996, signal 193502/230461 (executing program)
2026/01/15 09:25:09 fetching corpus: 7046, signal 193944/230462 (executing program)
2026/01/15 09:25:09 fetching corpus: 7096, signal 194298/230462 (executing program)
2026/01/15 09:25:09 fetching corpus: 7146, signal 194686/230483 (executing program)
2026/01/15 09:25:09 fetching corpus: 7196, signal 195270/230486 (executing program)
2026/01/15 09:25:09 fetching corpus: 7246, signal 195625/230486 (executing program)
2026/01/15 09:25:09 fetching corpus: 7295, signal 195929/230491 (executing program)
2026/01/15 09:25:09 fetching corpus: 7345, signal 196247/230491 (executing program)
2026/01/15 09:25:10 fetching corpus: 7395, signal 196677/230491 (executing program)
2026/01/15 09:25:10 fetching corpus: 7445, signal 196993/230491 (executing program)
2026/01/15 09:25:10 fetching corpus: 7495, signal 197410/230511 (executing program)
2026/01/15 09:25:10 fetching corpus: 7545, signal 198087/230512 (executing program)
2026/01/15 09:25:10 fetching corpus: 7595, signal 198394/230512 (executing program)
2026/01/15 09:25:10 fetching corpus: 7644, signal 198614/230514 (executing program)
2026/01/15 09:25:10 fetching corpus: 7694, signal 198970/230518 (executing program)
2026/01/15 09:25:10 fetching corpus: 7744, signal 199187/230523 (executing program)
2026/01/15 09:25:10 fetching corpus: 7794, signal 199497/230523 (executing program)
2026/01/15 09:25:11 fetching corpus: 7844, signal 200007/230523 (executing program)
2026/01/15 09:25:11 fetching corpus: 7894, signal 200248/230530 (executing program)
2026/01/15 09:25:11 fetching corpus: 7944, signal 200686/230530 (executing program)
2026/01/15 09:25:11 fetching corpus: 7994, signal 201147/230547 (executing program)
2026/01/15 09:25:11 fetching corpus: 8044, signal 201439/230552 (executing program)
2026/01/15 09:25:11 fetching corpus: 8094, signal 201675/230552 (executing program)
2026/01/15 09:25:11 fetching corpus: 8144, signal 201949/230564 (executing program)
2026/01/15 09:25:11 fetching corpus: 8194, signal 202269/230564 (executing program)
2026/01/15 09:25:11 fetching corpus: 8244, signal 202545/230564 (executing program)
2026/01/15 09:25:11 fetching corpus: 8294, signal 203031/230564 (executing program)
2026/01/15 09:25:12 fetching corpus: 8344, signal 204667/230564 (executing program)
2026/01/15 09:25:12 fetching corpus: 8394, signal 204958/230564 (executing program)
2026/01/15 09:25:12 fetching corpus: 8444, signal 205320/230567 (executing program)
2026/01/15 09:25:12 fetching corpus: 8494, signal 205698/230567 (executing program)
2026/01/15 09:25:12 fetching corpus: 8544, signal 205892/230575 (executing program)
2026/01/15 09:25:12 fetching corpus: 8594, signal 206189/230576 (executing program)
2026/01/15 09:25:12 fetching corpus: 8644, signal 206567/230610 (executing program)
2026/01/15 09:25:12 fetching corpus: 8694, signal 206872/230611 (executing program)
2026/01/15 09:25:12 fetching corpus: 8744, signal 207140/230611 (executing program)
2026/01/15 09:25:12 fetching corpus: 8794, signal 207434/230611 (executing program)
2026/01/15 09:25:13 fetching corpus: 8843, signal 207664/230611 (executing program)
2026/01/15 09:25:13 fetching corpus: 8893, signal 207976/230616 (executing program)
2026/01/15 09:25:13 fetching corpus: 8943, signal 208248/230632 (executing program)
2026/01/15 09:25:13 fetching corpus: 8993, signal 208612/230632 (executing program)
2026/01/15 09:25:13 fetching corpus: 9043, signal 208904/230633 (executing program)
2026/01/15 09:25:13 fetching corpus: 9090, signal 209148/230642 (executing program)
2026/01/15 09:25:13 fetching corpus: 9139, signal 209346/230642 (executing program)
2026/01/15 09:25:13 fetching corpus: 9189, signal 209622/230642 (executing program)
2026/01/15 09:25:13 fetching corpus: 9239, signal 209861/230642 (executing program)
2026/01/15 09:25:13 fetching corpus: 9289, signal 210228/230642 (executing program)
2026/01/15 09:25:14 fetching corpus: 9339, signal 210973/230647 (executing program)
2026/01/15 09:25:14 fetching corpus: 9389, signal 211204/230647 (executing program)
2026/01/15 09:25:14 fetching corpus: 9439, signal 211551/230647 (executing program)
2026/01/15 09:25:14 fetching corpus: 9489, signal 211766/230662 (executing program)
2026/01/15 09:25:14 fetching corpus: 9539, signal 212022/230665 (executing program)
2026/01/15 09:25:14 fetching corpus: 9589, signal 212307/230665 (executing program)
2026/01/15 09:25:14 fetching corpus: 9639, signal 212501/230669 (executing program)
2026/01/15 09:25:14 fetching corpus: 9689, signal 212806/230670 (executing program)
2026/01/15 09:25:14 fetching corpus: 9739, signal 213086/230670 (executing program)
2026/01/15 09:25:14 fetching corpus: 9789, signal 213348/230670 (executing program)
2026/01/15 09:25:14 fetching corpus: 9839, signal 213652/230670 (executing program)
2026/01/15 09:25:14 fetching corpus: 9889, signal 213856/230670 (executing program)
2026/01/15 09:25:15 fetching corpus: 9939, signal 214074/230695 (executing program)
2026/01/15 09:25:15 fetching corpus: 9989, signal 214307/230695 (executing program)
2026/01/15 09:25:15 fetching corpus: 10039, signal 214617/230695 (executing program)
2026/01/15 09:25:15 fetching corpus: 10089, signal 214873/230695 (executing program)
2026/01/15 09:25:15 fetching corpus: 10139, signal 215078/230695 (executing program)
2026/01/15 09:25:15 fetching corpus: 10189, signal 215327/230697 (executing program)
2026/01/15 09:25:15 fetching corpus: 10239, signal 215524/230697 (executing program)
2026/01/15 09:25:15 fetching corpus: 10289, signal 215829/230698 (executing program)
2026/01/15 09:25:15 fetching corpus: 10339, signal 216018/230698 (executing program)
2026/01/15 09:25:16 fetching corpus: 10389, signal 216453/230700 (executing program)
2026/01/15 09:25:16 fetching corpus: 10439, signal 216708/230700 (executing program)
2026/01/15 09:25:16 fetching corpus: 10489, signal 216936/230700 (executing program)
2026/01/15 09:25:16 fetching corpus: 10538, signal 217273/230708 (executing program)
2026/01/15 09:25:16 fetching corpus: 10588, signal 217497/230708 (executing program)
2026/01/15 09:25:16 fetching corpus: 10638, signal 217764/230713 (executing program)
2026/01/15 09:25:16 fetching corpus: 10688, signal 217983/230725 (executing program)
2026/01/15 09:25:16 fetching corpus: 10738, signal 218189/230729 (executing program)
2026/01/15 09:25:16 fetching corpus: 10788, signal 218393/230730 (executing program)
2026/01/15 09:25:16 fetching corpus: 10838, signal 218716/230730 (executing program)
2026/01/15 09:25:16 fetching corpus: 10888, signal 219003/230739 (executing program)
2026/01/15 09:25:17 fetching corpus: 10938, signal 219166/230739 (executing program)
2026/01/15 09:25:17 fetching corpus: 10988, signal 219436/230739 (executing program)
2026/01/15 09:25:17 fetching corpus: 11038, signal 219638/230739 (executing program)
2026/01/15 09:25:17 fetching corpus: 11088, signal 219906/230744 (executing program)
2026/01/15 09:25:17 fetching corpus: 11138, signal 220079/230745 (executing program)
2026/01/15 09:25:17 fetching corpus: 11188, signal 220339/230751 (executing program)
2026/01/15 09:25:17 fetching corpus: 11238, signal 220609/230754 (executing program)
2026/01/15 09:25:17 fetching corpus: 11288, signal 220849/230754 (executing program)
2026/01/15 09:25:18 fetching corpus: 11338, signal 221146/230754 (executing program)
2026/01/15 09:25:18 fetching corpus: 11388, signal 221326/230766 (executing program)
2026/01/15 09:25:18 fetching corpus: 11438, signal 221573/230766 (executing program)
2026/01/15 09:25:18 fetching corpus: 11488, signal 221811/230766 (executing program)
2026/01/15 09:25:18 fetching corpus: 11538, signal 222000/230766 (executing program)
2026/01/15 09:25:18 fetching corpus: 11588, signal 222306/230766 (executing program)
2026/01/15 09:25:18 fetching corpus: 11638, signal 222505/230766 (executing program)
2026/01/15 09:25:18 fetching corpus: 11688, signal 222773/230768 (executing program)
2026/01/15 09:25:18 fetching corpus: 11738, signal 223144/230768 (executing program)
2026/01/15 09:25:18 fetching corpus: 11788, signal 223331/230773 (executing program)
2026/01/15 09:25:18 fetching corpus: 11838, signal 223555/230773 (executing program)
2026/01/15 09:25:18 fetching corpus: 11888, signal 223751/230773 (executing program)
2026/01/15 09:25:19 fetching corpus: 11938, signal 223986/230797 (executing program)
2026/01/15 09:25:19 fetching corpus: 11988, signal 224229/230797 (executing program)
2026/01/15 09:25:19 fetching corpus: 12038, signal 224416/230798 (executing program)
2026/01/15 09:25:19 fetching corpus: 12088, signal 224596/230798 (executing program)
2026/01/15 09:25:19 fetching corpus: 12138, signal 224838/230799 (executing program)
2026/01/15 09:25:19 fetching corpus: 12187, signal 225136/230800 (executing program)
2026/01/15 09:25:19 fetching corpus: 12237, signal 225398/230800 (executing program)
2026/01/15 09:25:19 fetching corpus: 12287, signal 225619/230800 (executing program)
2026/01/15 09:25:19 fetching corpus: 12337, signal 225843/230800 (executing program)
2026/01/15 09:25:19 fetching corpus: 12387, signal 226032/230800 (executing program)
2026/01/15 09:25:20 fetching corpus: 12437, signal 226304/230800 (executing program)
2026/01/15 09:25:20 fetching corpus: 12487, signal 226480/230800 (executing program)
2026/01/15 09:25:20 fetching corpus: 12537, signal 226757/230800 (executing program)
2026/01/15 09:25:20 fetching corpus: 12587, signal 226978/230800 (executing program)
2026/01/15 09:25:20 fetching corpus: 12637, signal 227194/230801 (executing program)
2026/01/15 09:25:20 fetching corpus: 12686, signal 227349/230801 (executing program)
2026/01/15 09:25:20 fetching corpus: 12736, signal 227553/230805 (executing program)
2026/01/15 09:25:20 fetching corpus: 12786, signal 227847/230807 (executing program)
2026/01/15 09:25:20 fetching corpus: 12836, signal 228152/230808 (executing program)
2026/01/15 09:25:20 fetching corpus: 12886, signal 228412/230809 (executing program)
2026/01/15 09:25:20 fetching corpus: 12936, signal 228571/230809 (executing program)
2026/01/15 09:25:21 fetching corpus: 12986, signal 228794/230809 (executing program)
2026/01/15 09:25:21 fetching corpus: 13036, signal 228977/230814 (executing program)
2026/01/15 09:25:21 fetching corpus: 13086, signal 229154/230814 (executing program)
2026/01/15 09:25:21 fetching corpus: 13122, signal 229284/230814 (executing program)
2026/01/15 09:25:21 fetching corpus: 13122, signal 229284/230814 (executing program)
2026/01/15 09:25:22 starting 8 fuzzer processes
09:25:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

09:25:22 executing program 1:
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x8)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
lseek(r0, 0x100000000, 0x0)
syz_io_uring_setup(0x455, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = dup2(r1, r1)
recvmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000100), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/128, 0x80}], 0x5}, 0x4000)
close_range(r0, 0xffffffffffffffff, 0x0)

09:25:22 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x8)

09:25:22 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x28}}, 0x0)

09:25:22 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

[   81.419220] audit: type=1400 audit(1768469122.776:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:25:22 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @local, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x3, 0x0, 0x6, 0x0, @loopback, @loopback}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0)

09:25:22 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xda6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)='x', 0x1)
splice(r0, 0x0, r2, 0x0, 0x1, 0x0)

09:25:22 executing program 6:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendfile(r0, r1, 0x0, 0x0)

[   82.535045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.537945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.540749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.546512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.552705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.605033] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.607737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.609757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.613190] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.616705] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.684748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.686608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.689534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.692292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.697587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.699738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.717036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.719072] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.724657] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.728113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.733435] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   82.744254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.748988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.750626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   82.752726] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   82.756876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   82.768683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   82.770745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.770838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.775070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.785560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.787320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.791889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.794411] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.796148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   82.811009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   82.812271] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   82.814329] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   82.816937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   82.818714] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   84.633251] Bluetooth: hci0: command tx timeout
[   84.696630] Bluetooth: hci1: command tx timeout
[   84.759675] Bluetooth: hci2: command tx timeout
[   84.824659] Bluetooth: hci3: command tx timeout
[   84.886279] Bluetooth: hci7: command tx timeout
[   84.887101] Bluetooth: hci6: command tx timeout
[   84.887403] Bluetooth: hci4: command tx timeout
[   84.948710] Bluetooth: hci5: command tx timeout
[   86.676475] Bluetooth: hci0: command tx timeout
[   86.742401] Bluetooth: hci1: command tx timeout
[   86.806093] Bluetooth: hci2: command tx timeout
[   86.870611] Bluetooth: hci3: command tx timeout
[   86.932400] Bluetooth: hci4: command tx timeout
[   86.932831] Bluetooth: hci7: command tx timeout
[   86.932864] Bluetooth: hci6: command tx timeout
[   86.996461] Bluetooth: hci5: command tx timeout
[   88.725383] Bluetooth: hci0: command tx timeout
[   88.789389] Bluetooth: hci1: command tx timeout
[   88.852408] Bluetooth: hci2: command tx timeout
[   88.917399] Bluetooth: hci3: command tx timeout
[   88.980427] Bluetooth: hci6: command tx timeout
[   88.980852] Bluetooth: hci4: command tx timeout
[   88.981238] Bluetooth: hci7: command tx timeout
[   89.046380] Bluetooth: hci5: command tx timeout
[   90.774380] Bluetooth: hci0: command tx timeout
[   90.837438] Bluetooth: hci1: command tx timeout
[   90.901390] Bluetooth: hci2: command tx timeout
[   90.966348] Bluetooth: hci3: command tx timeout
[   91.029497] Bluetooth: hci7: command tx timeout
[   91.029960] Bluetooth: hci4: command tx timeout
[   91.030289] Bluetooth: hci6: command tx timeout
[   91.092485] Bluetooth: hci5: command tx timeout
[  117.832019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.832697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.054638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.055252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.149413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.149982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.197396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.197962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.341200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.342974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.367327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.368654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.493473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.494098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.514314] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3812 comm=syz-executor.0
[  118.516049] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3812 comm=syz-executor.0
[  118.640603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.641218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.674460] audit: type=1400 audit(1768469160.032:8): avc:  denied  { open } for  pid=3822 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  118.676031] audit: type=1400 audit(1768469160.032:9): avc:  denied  { kernel } for  pid=3822 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  118.722509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.723119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.830137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.831327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.299556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.300168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.399728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.400336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.453657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.454260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.486457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.487018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.645581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.646174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.686385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.686937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:26:01 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x89, 0x0, 0x0, 0x0, 0x2)
clock_gettime(0x0, 0x0)

09:26:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x8)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
lseek(r0, 0x100000000, 0x0)
syz_io_uring_setup(0x455, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = dup2(r1, r1)
recvmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000100), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/128, 0x80}], 0x5}, 0x4000)
close_range(r0, 0xffffffffffffffff, 0x0)

09:26:01 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xda6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)='x', 0x1)
splice(r0, 0x0, r2, 0x0, 0x1, 0x0)

09:26:01 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x8)

09:26:01 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @local, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x3, 0x0, 0x6, 0x0, @loopback, @loopback}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0)

09:26:01 executing program 7:
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f00000002c0)={<r0=>0xffffffffffffffff}, 0x0)
syz_open_dev$vcsu(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0)

09:26:01 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
inotify_init()
syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
select(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x3f}, 0x0, 0x0)

09:26:01 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)})
io_setup(0x6227, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_submit(r0, 0x23, &(0x7f0000000280))

09:26:01 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
r1 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x2840, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x6)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)

09:26:01 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xda6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)='x', 0x1)
splice(r0, 0x0, r2, 0x0, 0x1, 0x0)

09:26:01 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @local, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x3, 0x0, 0x6, 0x0, @loopback, @loopback}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0)

09:26:01 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x8)

09:26:01 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
inotify_init()
syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
select(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x3f}, 0x0, 0x0)

09:26:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x8)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
lseek(r0, 0x100000000, 0x0)
syz_io_uring_setup(0x455, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = dup2(r1, r1)
recvmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000100), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/128, 0x80}], 0x5}, 0x4000)
close_range(r0, 0xffffffffffffffff, 0x0)

09:26:01 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmmsg$inet6(r1, &(0x7f0000007200)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0)

09:26:01 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)})
io_setup(0x6227, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_submit(r0, 0x23, &(0x7f0000000280))

09:26:01 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @local, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x3, 0x0, 0x6, 0x0, @loopback, @loopback}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0)

09:26:01 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xda6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)='x', 0x1)
splice(r0, 0x0, r2, 0x0, 0x1, 0x0)

[  120.042841] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
09:26:01 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x8)

09:26:01 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
r1 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x2840, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x6)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)

09:26:01 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
inotify_init()
syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
select(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x3f}, 0x0, 0x0)

09:26:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x8)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
lseek(r0, 0x100000000, 0x0)
syz_io_uring_setup(0x455, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = dup2(r1, r1)
recvmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000100), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/128, 0x80}], 0x5}, 0x4000)
close_range(r0, 0xffffffffffffffff, 0x0)

09:26:01 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)})
io_setup(0x6227, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_submit(r0, 0x23, &(0x7f0000000280))

09:26:01 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)})
io_setup(0x6227, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_submit(r0, 0x23, &(0x7f0000000280))

09:26:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000001000000", @ANYRES32=r1, @ANYBLOB="080003"], 0x24}], 0x1}, 0x0)

09:26:01 executing program 4:
clock_gettime(0x0, &(0x7f0000000300))
r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300), 0x500)

09:26:01 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)})
io_setup(0x6227, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_submit(r0, 0x23, &(0x7f0000000280))

09:26:01 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
inotify_init()
syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
select(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x3f}, 0x0, 0x0)

09:26:01 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)={0x1, 0x0, 0x0, "c1"})

09:26:01 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)})
io_setup(0x6227, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_submit(r0, 0x23, &(0x7f0000000280))

[  120.284493] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.341017] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
09:26:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000001000000", @ANYRES32=r1, @ANYBLOB="080003"], 0x24}], 0x1}, 0x0)

09:26:01 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
r1 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x2840, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x6)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)

09:26:01 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)})
io_setup(0x6227, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_submit(r0, 0x23, &(0x7f0000000280))

09:26:01 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)})
io_setup(0x6227, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_submit(r0, 0x23, &(0x7f0000000280))

09:26:01 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8)

09:26:01 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001000000000000000200000001000600000000000000000000000000800029a3169df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001000000000000000200000001000600000000000000000000000000800029a3169df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100034eb70325132510000eb7032510300000000002e2e202020202020202020100034eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200034eb70325132510000eb70325104001a040000", 0x80, 0x14400}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24400}, {&(0x7f0000010f00)='syzkallers\x00'/32, 0x20, 0x34400}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54400}], 0x0, &(0x7f0000011100))

09:26:01 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)})
io_setup(0x6227, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_submit(r0, 0x23, &(0x7f0000000280))

09:26:01 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000240)=0x1)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x9, 0x0, 0x0, 0xf})
r1 = dup(r0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0)

[  120.453258] loop6: detected capacity change from 0 to 1348
09:26:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000001000000", @ANYRES32=r1, @ANYBLOB="080003"], 0x24}], 0x1}, 0x0)

09:26:01 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

09:26:01 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
r1 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x2840, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x6)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)

09:26:01 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)})
io_setup(0x6227, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_submit(r0, 0x23, &(0x7f0000000280))

09:26:01 executing program 2:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

09:26:01 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[])
getdents(r0, &(0x7f0000000080)=""/126, 0x7e)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
getdents64(r1, &(0x7f0000000240)=""/44, 0x2c)
r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fcntl$dupfd(r2, 0x0, r3)
getdents(r3, &(0x7f0000000040)=""/49, 0x31)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

09:26:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)

09:26:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100037e970325132510000e97032510300000000002e2e202020202020202020100037e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200037e970325132510000e970325104001a040000", 0x80, 0x52000}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0xd2000}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x152000}], 0x0, &(0x7f0000011200))

09:26:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000001000000", @ANYRES32=r1, @ANYBLOB="080003"], 0x24}], 0x1}, 0x0)

09:26:01 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000), 0x2)

09:26:02 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040))
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f00000000c0)={r3})

[  120.670642] loop4: detected capacity change from 0 to 5408
[  120.732970] loop6: detected capacity change from 0 to 64
[  120.749275] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
09:26:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/210, 0xd2}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/25, 0x19}], 0x9}}], 0x1, 0x0, 0x0)

09:26:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11800}, {&(0x7f0000010800)="53595a4b414c4c45522020080000e980325132510000e980325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100037e970325132510000e970325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200037e970325132510000e970325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200037e970325132510000e970325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200037e970325132510000e9703251070064000000", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100037e970325132510000e97032510300000000002e2e202020202020202020100037e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200037e970325132510000e970325104001a040000", 0x80, 0x52000}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0xd2000}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x152000}], 0x0, &(0x7f0000011200))

09:26:02 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff)

09:26:02 executing program 3:
syslog(0x2, &(0x7f0000000000), 0x0)

09:26:02 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

09:26:02 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040))
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f00000000c0)={r3})

09:26:02 executing program 6:
syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x20000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500))

09:26:02 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@loopback={0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0)

[  120.837450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'.
[  120.839338] loop4: detected capacity change from 0 to 5408
09:26:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCGSID(r0, 0x5429, 0x0)

09:26:02 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6)

09:26:02 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff)

09:26:02 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r0=>0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0)
io_submit(r0, 0xa, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)='\n', 0x1}])

09:26:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100037e970325132510000e97032510300000000002e2e202020202020202020100037e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200037e970325132510000e970325104001a040000", 0x80, 0x52000}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0xd2000}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x152000}], 0x0, &(0x7f0000011200))

09:26:02 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040))
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f00000000c0)={r3})

[  120.978439] loop4: detected capacity change from 0 to 5408
09:26:02 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@loopback={0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0)

09:26:02 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040))
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f00000000c0)={r3})

09:26:02 executing program 2:
clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:26:02 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff)

09:26:02 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x2275, &(0x7f00000001c0)={"95eedf83b210d9b313bf8f1d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:26:02 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6)

09:26:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100037e970325132510000e97032510300000000002e2e202020202020202020100037e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200037e970325132510000e970325104001a040000", 0x80, 0x52000}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0xd2000}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x152000}], 0x0, &(0x7f0000011200))

09:26:02 executing program 6:
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "825915", 0x0, 0x88, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@fragment]}}}}}}}, 0x0)

[  121.131142] loop4: detected capacity change from 0 to 5408
[  121.148479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'.
09:26:02 executing program 6:
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "825915", 0x0, 0x88, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@fragment]}}}}}}}, 0x0)

09:26:02 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6)

09:26:02 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff)

09:26:02 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00')
pread64(r1, &(0x7f0000000200)=""/193, 0xc1, 0x3)

09:26:02 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@loopback={0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0)

09:26:02 executing program 6:
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "825915", 0x0, 0x88, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@fragment]}}}}}}}, 0x0)

09:26:02 executing program 2:
clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[  121.311410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'.
09:26:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

[  121.481289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'.
09:26:02 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6)

09:26:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
close(r0)

09:26:02 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@loopback={0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0)

09:26:02 executing program 6:
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "825915", 0x0, 0x88, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@fragment]}}}}}}}, 0x0)

09:26:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

09:26:02 executing program 4:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
madvise(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x16)

09:26:02 executing program 2:
clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:26:02 executing program 5:
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$invalidate(0x15, r0)
keyctl$unlink(0x9, 0x0, r0)

09:26:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)

[  121.561008] 
[  121.561223] =====================================
[  121.561671] WARNING: bad unlock balance detected!
[  121.562099] 6.19.0-rc5-next-20260115 #1 Not tainted
[  121.562551] -------------------------------------
[  121.563001] syz-executor.5/4105 is trying to release lock (rcu_read_lock) at:
[  121.564114] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  121.565125] but there are no more locks to release!
[  121.565899] 
[  121.565899] other info that might help us debug this:
[  121.566818] 4 locks held by syz-executor.5/4105:
[  121.567533]  #0: ffff88800f6fc3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  121.568726]  #1: ffff88804a003d10 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  121.570108]  #2: ffff88800f578950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  121.571722]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  121.573037] 
[  121.573037] stack backtrace:
[  121.573661] CPU: 0 UID: 0 PID: 4105 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) 
[  121.573678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  121.573686] Call Trace:
[  121.573691]  <TASK>
[  121.573696]  dump_stack_lvl+0xca/0x120
[  121.573726]  ? __wait_on_freeing_inode+0x105/0x350
[  121.573741]  print_unlock_imbalance_bug+0x118/0x130
[  121.573757]  ? __wait_on_freeing_inode+0x105/0x350
[  121.573772]  lock_release+0x1ee/0x270
[  121.573787]  __wait_on_freeing_inode+0x10a/0x350
[  121.573803]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  121.573818]  ? __pfx_var_wake_function+0x10/0x10
[  121.573837]  ? lock_is_held_type+0x9e/0x120
[  121.573849]  insert_inode_locked+0x25f/0x890
[  121.573867]  __ext4_new_inode+0x223d/0x4cd0
[  121.573885]  ? __pfx___ext4_new_inode+0x10/0x10
[  121.573899]  ? __pfx___dquot_initialize+0x10/0x10
[  121.573919]  ? __pfx_avc_has_perm+0x10/0x10
[  121.573936]  ext4_symlink+0x623/0xb40
[  121.573955]  ? __pfx_ext4_symlink+0x10/0x10
[  121.573971]  ? security_inode_permission+0x72/0xe0
[  121.573986]  vfs_symlink+0x44b/0x840
[  121.574003]  filename_symlinkat+0x158/0x440
[  121.574018]  ? __pfx_filename_symlinkat+0x10/0x10
[  121.574031]  ? strncpy_from_user+0x21b/0x2f0
[  121.574049]  __x64_sys_symlink+0x82/0x110
[  121.574063]  do_syscall_64+0xbf/0x420
[  121.574077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.574090] RIP: 0033:0x7fa92a03b427
[  121.574100] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.574111] RSP: 002b:00007fffa9ad5288 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  121.574122] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa92a03b427
[  121.574130] RDX: 00007fffa9ad5363 RSI: 00007fa92a096022 RDI: 00007fffa9ad5350
[  121.574137] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fffa9ad5120
[  121.574144] R10: 00007fffa9ad4fd7 R11: 0000000000000206 R12: 0000000000000001
[  121.574151] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fffa9ad5350
[  121.574162]  </TASK>
[  121.591624] ------------[ cut here ]------------
[  121.592013] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.5/4105
[  121.592951] Modules linked in:
[  121.593260] CPU: 0 UID: 0 PID: 4105 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) 
[  121.594172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  121.594894] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  121.595430] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  121.596964] RSP: 0018:ffff88804a9af9a0 EFLAGS: 00010286
[  121.597454] RAX: 00000000ffffffff RBX: ffff888016308000 RCX: ffffffff815660f7
[  121.598043] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880163083fc
[  121.598671] RBP: ffff888016308000 R08: 0000000000000000 R09: fffffbfff0ba7040
[  121.599258] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016308000
[  121.599906] R13: 0000000000000001 R14: ffffffff85c0d330 R15: ffff88804a292938
[  121.600540] FS:  000055558c73b400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000
[  121.601198] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.601740] CR2: 00007fa92a0bb545 CR3: 0000000049002000 CR4: 0000000000350ef0
[  121.602326] Call Trace:
[  121.602625]  <TASK>
[  121.603316]  __wait_on_freeing_inode+0x10f/0x350
[  121.604072]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  121.605225]  ? __pfx_var_wake_function+0x10/0x10
[  121.606512]  ? lock_is_held_type+0x9e/0x120
[  121.607621]  insert_inode_locked+0x25f/0x890
[  121.609214]  __ext4_new_inode+0x223d/0x4cd0
[  121.611732]  ? __pfx___ext4_new_inode+0x10/0x10
[  121.612953]  ? __pfx___dquot_initialize+0x10/0x10
[  121.613741]  ? __pfx_avc_has_perm+0x10/0x10
[  121.615522]  ext4_symlink+0x623/0xb40
[  121.617749]  ? __pfx_ext4_symlink+0x10/0x10
[  121.618764]  ? security_inode_permission+0x72/0xe0
[  121.620414]  vfs_symlink+0x44b/0x840
[  121.621683]  filename_symlinkat+0x158/0x440
[  121.622812]  ? __pfx_filename_symlinkat+0x10/0x10
[  121.623601]  ? strncpy_from_user+0x21b/0x2f0
[  121.625460]  __x64_sys_symlink+0x82/0x110
[  121.626156]  do_syscall_64+0xbf/0x420
[  121.626994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.627611] RIP: 0033:0x7fa92a03b427
[  121.628008] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.629522] RSP: 002b:00007fffa9ad5288 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  121.630141] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa92a03b427
[  121.630770] RDX: 00007fffa9ad5363 RSI: 00007fa92a096022 RDI: 00007fffa9ad5350
[  121.631396] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fffa9ad5120
[  121.631989] R10: 00007fffa9ad4fd7 R11: 0000000000000206 R12: 0000000000000001
[  121.632616] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fffa9ad5350
[  121.635205]  </TASK>
[  121.635452] irq event stamp: 293
[  121.635744] hardirqs last  enabled at (293): [<ffffffff84d19a7c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  121.636618] hardirqs last disabled at (292): [<ffffffff84d197d3>] _raw_spin_lock_irqsave+0x53/0x60
[  121.637461] softirqs last  enabled at (288): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  121.638207] softirqs last disabled at (286): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  121.639054] ---[ end trace 0000000000000000 ]---
09:26:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

09:26:03 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x20)

09:26:03 executing program 0:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

09:26:03 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0xfdfdffff})

09:26:03 executing program 4:
mlockall(0x5)
mlockall(0x3)
mlockall(0x5)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:26:03 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SG_GET_SG_TABLESIZE(r0, 0x1267, &(0x7f0000000000))

09:26:03 executing program 2:
clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:26:03 executing program 1:
syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
chown(&(0x7f0000000100)='./file0\x00', 0xee00, 0x0)

09:26:03 executing program 6:
syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fsc'])

09:26:03 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[])
symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00')
unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x0)

09:26:03 executing program 3:
capset(0xfffffffffffffffe, 0x0)

09:26:03 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

09:26:03 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=@xfs_parent={0x1c}, 0x0)

09:26:03 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x6, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}})

09:26:03 executing program 3:
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[{@commit={'commit', 0x3d, 0x1}}, {@init_itable_val}, {@norecovery}, {@lazytime}, {@min_batch_time}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}]})

09:26:03 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0xfdfdffff})

[  121.950671] EXT4-fs: quotafile must be on filesystem root
[  121.951938] EXT4-fs: quotafile must be on filesystem root
09:26:03 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=@xfs_parent={0x1c}, 0x0)

09:26:03 executing program 0:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ext3\x00', 0x0, 0x0)

09:26:03 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x0, 0x53})

09:26:03 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ac", 0x1, r0)
request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='user\x00', r1)

[  122.038744] /dev/nbd0: Can't lookup blockdev
09:26:03 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=@xfs_parent={0x1c}, 0x0)

09:26:03 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0xfdfdffff})

09:26:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0))

09:26:03 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00')
mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

09:26:03 executing program 4:
mlockall(0x5)
mlockall(0x3)
mlockall(0x5)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:26:03 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ac", 0x1, r0)
request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='user\x00', r1)

09:26:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0)

09:26:03 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=@xfs_parent={0x1c}, 0x0)

09:26:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10}, 0x10}}, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x5, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})

09:26:03 executing program 2:
mlockall(0x5)
mlockall(0x3)
mlockall(0x5)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:26:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0)

09:26:03 executing program 6:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)={'trans=virtio,', {[{@access_user}]}})

09:26:03 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ac", 0x1, r0)
request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='user\x00', r1)

09:26:03 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0xfdfdffff})

09:26:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

09:26:03 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ac", 0x1, r0)
request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='user\x00', r1)

09:26:03 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
tgkill(r0, r1, 0x31)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3)
io_setup(0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

09:26:03 executing program 4:
mlockall(0x5)
mlockall(0x3)
mlockall(0x5)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:26:03 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0)

09:26:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

09:26:03 executing program 2:
mlockall(0x5)
mlockall(0x3)
mlockall(0x5)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:26:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0)

09:26:03 executing program 6:
getuid()

09:26:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0)

09:26:03 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5428, 0x0)

09:26:03 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000001a80)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendmmsg$inet6(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000013c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000004340)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @broadcast}, r2}}}], 0x28}}], 0x2, 0x0)

09:26:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

09:26:04 executing program 0:
rt_sigprocmask(0x2, &(0x7f0000000d80), 0x0, 0x8)

[  122.663446] audit: type=1400 audit(1768469164.021:10): avc:  denied  { write } for  pid=4200 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
09:26:04 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40400, 0xfffffffffffffffd, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00')
pread64(r2, &(0x7f0000000040)=""/169, 0xa9, 0x8000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fork()
syz_open_procfs(r3, &(0x7f0000000000)='net/ip_vs\x00')

09:26:04 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0)
write$binfmt_script(r0, 0x0, 0x0)

09:26:04 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0))

09:26:04 executing program 0:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f00000000c0)=""/10)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x8, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x7, 0x8a06}, 0x2}, 0x20, 0x1, 0x0)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:26:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

09:26:04 executing program 2:
mlockall(0x5)
mlockall(0x3)
mlockall(0x5)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:26:04 executing program 0:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f00000000c0)=""/10)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x8, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x7, 0x8a06}, 0x2}, 0x20, 0x1, 0x0)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:26:04 executing program 4:
mlockall(0x5)
mlockall(0x3)
mlockall(0x5)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:26:04 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0))

09:26:04 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
tgkill(r0, r1, 0x31)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3)
io_setup(0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

09:26:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x1154, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)

09:26:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

09:26:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
tgkill(r0, r1, 0x31)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3)
io_setup(0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

09:26:04 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0))

09:26:04 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
tgkill(r0, r1, 0x31)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3)
io_setup(0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

09:26:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
finit_module(r0, 0x0, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

09:26:04 executing program 0:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f00000000c0)=""/10)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x8, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x7, 0x8a06}, 0x2}, 0x20, 0x1, 0x0)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:26:04 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0))

09:26:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
tgkill(r0, r1, 0x31)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3)
io_setup(0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

09:26:04 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
tgkill(r0, r1, 0x31)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3)
io_setup(0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

09:26:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="01", 0x1, 0x800}], 0x0, &(0x7f0000013c00)=ANY=[])

[  123.413526] loop3: detected capacity change from 0 to 512
[  123.429723] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  123.431226] EXT4-fs (loop3): group descriptors corrupted!
[  123.445627] loop3: detected capacity change from 0 to 512
[  123.447163] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  123.449027] EXT4-fs (loop3): group descriptors corrupted!
09:26:05 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
listen(r1, 0x0)
recvmmsg$unix(r1, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}], 0x1, 0x0, 0x0)

09:26:05 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00')
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pread64(r0, &(0x7f0000000040)=""/203, 0xcb, 0x0)

09:26:05 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
tgkill(r0, r1, 0x31)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3)
io_setup(0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

09:26:05 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
tgkill(r0, r1, 0x31)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3)
io_setup(0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

09:26:05 executing program 6:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x401054d6, 0x0)

09:26:05 executing program 0:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f00000000c0)=""/10)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x8, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x7, 0x8a06}, 0x2}, 0x20, 0x1, 0x0)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:26:05 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
tgkill(r0, r1, 0x31)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3)
io_setup(0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

09:26:05 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2cd})

[  123.732742] perf: interrupt took too long (2517 > 2500), lowering kernel.perf_event_max_sample_rate to 79000
[  123.733906] perf: interrupt took too long (3174 > 3146), lowering kernel.perf_event_max_sample_rate to 63000
09:26:05 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
r1 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000200))
close_range(r1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x57, 0x3, 0x1f, 0x8, 0x0, 0x6ec, 0x506a, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x919b, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x40, 0x10000, 0x6, 0x8, 0x86f, 0x2c, 0x8, 0x0, 0x18, 0x0, 0x8}, 0x0, 0x10, r1, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)

09:26:05 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0)

09:26:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlockall(0x2)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000100)=0x40, 0x8001, 0x3)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000)
mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00')
fcntl$notify(r1, 0x402, 0x80000010)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140))

[  123.806189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  123.814323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  123.829477] perf: interrupt took too long (3992 > 3967), lowering kernel.perf_event_max_sample_rate to 50000
[  123.835706] perf: interrupt took too long (4998 > 4990), lowering kernel.perf_event_max_sample_rate to 40000
[  123.847868] perf: interrupt took too long (6252 > 6247), lowering kernel.perf_event_max_sample_rate to 31000
09:26:05 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x31f, &(0x7f0000000100)={"ec6fdd1410d4da9a95a0ee39", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  123.875855] audit: type=1400 audit(1768469165.234:11): avc:  denied  { watch } for  pid=4319 comm="syz-executor.2" path="/proc/4319/task" dev="proc" ino=6703 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
09:26:05 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x9000000, 0x0}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})

09:26:05 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

09:26:05 executing program 5:
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, 0x0, 0x1)

09:26:05 executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)="3a4987", 0x3}}, 0x0)

09:26:05 executing program 5:
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, 0x0, 0x1)

[  123.960596] ieee802154 phy0 wpan0: encryption failed: -22
09:26:05 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsu(0x0, 0x0, 0x0)
getgroups(0x1, &(0x7f0000002c40)=[0xee01])
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b45, 0x0)

09:26:05 executing program 5:
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, 0x0, 0x1)

09:26:05 executing program 5:
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, 0x0, 0x1)

09:26:05 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0xffffffffffffffff)

09:26:05 executing program 5:
r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$read(0x1d, r1, &(0x7f0000000000)=""/246, 0xf6)

09:26:08 executing program 5:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffcfffc}]})
unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0)

09:26:08 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
tgkill(r0, r1, 0x31)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3)
io_setup(0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)

[  127.397692] audit: type=1326 audit(1768469168.755:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4365 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92a03bb19 code=0x7ffc0000
[  127.403513] audit: type=1326 audit(1768469168.758:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4365 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fa92a03bb19 code=0x7ffc0000
[  127.411802] audit: type=1326 audit(1768469168.759:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4365 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92a03bb19 code=0x7ffc0000
[  127.417170] audit: type=1326 audit(1768469168.759:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4365 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa92a03ac27 code=0x7ffc0000
[  127.419604] audit: type=1326 audit(1768469168.759:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4365 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa92a03d04a code=0x7ffc0000
[  127.424596] audit: type=1326 audit(1768469168.762:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4365 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa929feea04 code=0x7ffc0000
[  127.429501] audit: type=1326 audit(1768469168.763:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4365 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92a03bb19 code=0x7ffc0000
[  127.434284] audit: type=1326 audit(1768469168.764:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4365 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92a03bb19 code=0x7ffc0000
[  127.436823] audit: type=1326 audit(1768469168.766:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4365 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa92a03bb19 code=0x7ffc0000
09:26:09 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x48, &(0x7f0000000a40), 0x8)

09:26:09 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x31f, &(0x7f0000000100)={"ec6fdd1410d4da9a95a0ee39", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:26:09 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_GET_GS(0x1022, 0xfffffffffffffffe)

09:26:09 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlockall(0x2)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000100)=0x40, 0x8001, 0x3)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000)
mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00')
fcntl$notify(r1, 0x402, 0x80000010)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140))

09:26:09 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000004240)={0x1f, @fixed}, 0x8)

09:26:09 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0)
ftruncate(r0, 0x8800000)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7})
lseek(r0, 0x0, 0x4)

09:26:09 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e000144000000000000f8ff0c00000001000000ff"], 0x1c}], 0x1}, 0x0)

09:26:09 executing program 1:
futex(0x0, 0x5, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0)

09:26:09 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
r1 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000200))
close_range(r1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x57, 0x3, 0x1f, 0x8, 0x0, 0x6ec, 0x506a, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x919b, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x40, 0x10000, 0x6, 0x8, 0x86f, 0x2c, 0x8, 0x0, 0x18, 0x0, 0x8}, 0x0, 0x10, r1, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)

09:26:09 executing program 1:
perf_event_open(&(0x7f0000000000)={0xa, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10000000000000, 0xffffffffffffffff, 0xa)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
write(0xffffffffffffffff, &(0x7f00000004c0)='^', 0xfdef)

09:26:09 executing program 6:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @empty, @empty, @dev}}}}, 0x0)

09:26:09 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
mq_notify(0xffffffffffffffff, 0x0)

09:26:09 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$addseals(r0, 0x409, 0x82f9930744ca6c97)

09:26:09 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{}, {0xd2, 0x2}, 0x0, 0x4, 0x81})

09:26:09 executing program 5:
iopl(0x0)

09:26:09 executing program 6:
r0 = fork()
wait4(r0, 0x0, 0x40000000, &(0x7f0000000000))
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4080)
fork()

09:26:09 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x31f, &(0x7f0000000100)={"ec6fdd1410d4da9a95a0ee39", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:26:09 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$addseals(r0, 0x409, 0x82f9930744ca6c97)

09:26:09 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

09:26:10 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlockall(0x2)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000100)=0x40, 0x8001, 0x3)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000)
mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00')
fcntl$notify(r1, 0x402, 0x80000010)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140))

09:26:10 executing program 6:
perf_event_open(&(0x7f0000000000)={0xa, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10000000000000, 0xffffffffffffffff, 0xa)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
write(0xffffffffffffffff, &(0x7f00000004c0)='^', 0xfdef)

09:26:10 executing program 1:
perf_event_open(&(0x7f0000000000)={0xa, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10000000000000, 0xffffffffffffffff, 0xa)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
write(0xffffffffffffffff, &(0x7f00000004c0)='^', 0xfdef)

09:26:10 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
r1 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000200))
close_range(r1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x57, 0x3, 0x1f, 0x8, 0x0, 0x6ec, 0x506a, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x919b, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x40, 0x10000, 0x6, 0x8, 0x86f, 0x2c, 0x8, 0x0, 0x18, 0x0, 0x8}, 0x0, 0x10, r1, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)

09:26:10 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="cf7f1001909e16a529bfacd54ada83cc", 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000180))

09:26:10 executing program 0:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)
lseek(r0, 0x0, 0x3)

09:26:10 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$addseals(r0, 0x409, 0x82f9930744ca6c97)

09:26:10 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x31f, &(0x7f0000000100)={"ec6fdd1410d4da9a95a0ee39", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  129.392994] Bluetooth: hci7: link tx timeout
[  129.393719] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
09:26:10 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$addseals(r0, 0x409, 0x82f9930744ca6c97)

09:26:10 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="cf7f1001909e16a529bfacd54ada83cc", 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000180))

09:26:10 executing program 0:
r0 = socket(0xa, 0x3, 0x6)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto(r0, 0x0, 0x2, 0x10, &(0x7f0000000040)=@phonet={0xa}, 0x80)

09:26:10 executing program 6:
perf_event_open(&(0x7f0000000000)={0xa, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10000000000000, 0xffffffffffffffff, 0xa)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
write(0xffffffffffffffff, &(0x7f00000004c0)='^', 0xfdef)

09:26:10 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="cf7f1001909e16a529bfacd54ada83cc", 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000180))

09:26:10 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"])
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00')
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
futimesat(r3, 0x0, 0x0)
mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd)
r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r5 = fcntl$dupfd(r4, 0x0, r4)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1)
mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)})
fork()

09:26:10 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

09:26:11 executing program 0:
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil)

[  129.696483] loop3: detected capacity change from 0 to 64
[  129.699721] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  129.762434] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  130.196424] Bluetooth: hci7: command 0x0405 tx timeout
09:26:11 executing program 1:
perf_event_open(&(0x7f0000000000)={0xa, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10000000000000, 0xffffffffffffffff, 0xa)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
write(0xffffffffffffffff, &(0x7f00000004c0)='^', 0xfdef)

09:26:11 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="cf7f1001909e16a529bfacd54ada83cc", 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000180))

09:26:11 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

09:26:11 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlockall(0x2)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000100)=0x40, 0x8001, 0x3)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000)
mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00')
fcntl$notify(r1, 0x402, 0x80000010)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140))

09:26:11 executing program 6:
perf_event_open(&(0x7f0000000000)={0xa, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10000000000000, 0xffffffffffffffff, 0xa)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
write(0xffffffffffffffff, &(0x7f00000004c0)='^', 0xfdef)

09:26:11 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000240)=0x1)

09:26:11 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
r1 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000200))
close_range(r1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x57, 0x3, 0x1f, 0x8, 0x0, 0x6ec, 0x506a, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x919b, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x40, 0x10000, 0x6, 0x8, 0x86f, 0x2c, 0x8, 0x0, 0x18, 0x0, 0x8}, 0x0, 0x10, r1, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)

09:26:11 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"])
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00')
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
futimesat(r3, 0x0, 0x0)
mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd)
r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r5 = fcntl$dupfd(r4, 0x0, r4)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1)
mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="180980b4e5c7687c1d417c828b03655667c74a59b8e4fc8027cc6a8c36d59e66acdf21e6d1215cdb11310fc0f1b1eecccb2bcf79e160454c52d32a58395a345c25b34691f4b31b710be70e896eeeea7622e91bb2cd7644cdc3b5b09b3ae70f529276b7350d0fc3a82c4a765907c2e141cccafa5a5fc50299aeed2a96ffd4312771f427720c6b3d2cd87985020993c36f3bc3fec186bc40dcd67043bda697e34a6fb2e16150deb9387a15eff0ddc92b3a938d8b77621feea31580d0c13e8aed290a2c56be9b3909d0595c8dab8081434998f7d6877b8693bde99e757aafce998db2221a2aa86e4cffe631303588040832b5dfef1fbda7d62f38d4aca60a51", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)})
fork()

[  130.403401] Bluetooth: hci7: link tx timeout
[  130.404125] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
09:26:11 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

09:26:11 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000240)=0x1)

09:26:11 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x300}})

09:26:11 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"])
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00')
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
futimesat(r3, 0x0, 0x0)
mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd)
r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r5 = fcntl$dupfd(r4, 0x0, r4)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1)
mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)})
fork()

09:26:11 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

09:26:12 executing program 1:
perf_event_open(&(0x7f0000000000)={0xa, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10000000000000, 0xffffffffffffffff, 0xa)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
write(0xffffffffffffffff, &(0x7f00000004c0)='^', 0xfdef)

09:26:12 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"])
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00')
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
futimesat(r3, 0x0, 0x0)
mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd)
r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r5 = fcntl$dupfd(r4, 0x0, r4)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1)
mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)})
fork()

09:26:12 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f00000002c0)=""/29, 0x1d)

09:26:12 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x300}})

09:26:12 executing program 4:
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000100)=""/246, 0xf6)

09:26:12 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000240)=0x1)

09:26:12 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"])
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00')
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
futimesat(r3, 0x0, 0x0)
mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd)
r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r5 = fcntl$dupfd(r4, 0x0, r4)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1)
mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)})
fork()

09:26:12 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000008cc0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

[  131.369537] Bluetooth: hci7: link tx timeout
[  131.370266] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa

VM DIAGNOSIS:
09:26:03  Registers:
info registers vcpu 0
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804a9af3f0
R8 =0000000000000000 R9 =ffffed1001765046 R10=00000000000fe503 R11=666666203a322320
R12=0000000000000823 R13=0000000000000060 R14=fffffbfff113838e R15=dffffc0000000000
RIP=ffffffff829750f5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558c73b400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa92a0bb545 CR3=0000000049002000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff8880223a7b40
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11004474f69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff8880223a7b78
RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555592f7c400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe6b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe6affde48 CR3=000000000fa98000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff0000000000ff0000000000000000
XMM02=00007f1a4c514b00737265646c6f682f XMM03=7269762f736563697665642f7379732f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000562925976390000056292599a890
XMM06=000000000000000000000004ffffffff XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000000202020000000000020200000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000