Warning: Permanently added '[localhost]:47113' (ECDSA) to the list of known hosts.
2026/01/17 09:49:01 fuzzer started
2026/01/17 09:49:01 dialing manager at localhost:42157
syzkaller login: [   52.883641] cgroup: Unknown subsys name 'net'
[   52.970763] cgroup: Unknown subsys name 'cpuset'
[   52.993960] cgroup: Unknown subsys name 'rlimit'
2026/01/17 09:49:13 syscalls: 202
2026/01/17 09:49:13 code coverage: enabled
2026/01/17 09:49:13 comparison tracing: enabled
2026/01/17 09:49:13 extra coverage: enabled
2026/01/17 09:49:13 setuid sandbox: enabled
2026/01/17 09:49:13 namespace sandbox: enabled
2026/01/17 09:49:13 Android sandbox: enabled
2026/01/17 09:49:13 fault injection: enabled
2026/01/17 09:49:13 leak checking: enabled
2026/01/17 09:49:13 net packet injection: enabled
2026/01/17 09:49:13 net device setup: enabled
2026/01/17 09:49:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/17 09:49:13 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/17 09:49:13 USB emulation: enabled
2026/01/17 09:49:13 hci packet injection: enabled
2026/01/17 09:49:13 wifi device emulation: enabled
2026/01/17 09:49:13 802.15.4 emulation: enabled
2026/01/17 09:49:13 fetching corpus: 0, signal 0/0 (executing program)
2026/01/17 09:49:14 starting 8 fuzzer processes
09:49:14 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000580))
pipe2(&(0x7f00000005c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f0000000600)={0x2, 0x100, 0x9, 0x3, 0x7fffffff, 0x6})
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000640))
ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000680))
ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000006c0)=0x1)

09:49:14 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r4, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000980)=""/3)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x420080, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000d40)={0x9c, 0x0, &(0x7f0000000c00)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b40)={@ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/15, 0xf, 0x2, 0x8}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/152, 0x98, 0x2, 0x1b}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done={0x40106309, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x1}, @clear_death], 0x46, 0x0, &(0x7f0000000cc0)="cdaf609f600d346b15ec1d462a798c9a84807f8eb16373e775085843352a98f3f28c33f44128244068d2898330167e55a9f915c98ca978fa7c2a814c45df3bb7a00efe3e6047"})
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000d80))
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000dc0))
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000e00))

09:49:14 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
r4 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000480))
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000600)={0x0, 0x1, [@local]})
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000640)=0x2)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000680))
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000800))
r5 = openat$cgroup_ro(r3, &(0x7f0000000840)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000880)={'veth0_virt_wifi\x00', @local})

09:49:14 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000340))
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x1c)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000003c0))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000400))
r4 = fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)

09:49:14 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
pipe2(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000004c0))
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000500))
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000580)='\x00')
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x40400, 0x0)
ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000600)={'custom1\x00'})

[   64.548753] audit: type=1400 audit(1768643354.704:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:49:14 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'veth1_virt_wifi\x00'})
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000440)=0xe7)
r5 = geteuid()
ioctl$TUNSETOWNER(r3, 0x400454cc, r5)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:49:14 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000300)=0x8)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000340))
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380))
r6 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000400)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'})
ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000004c0)=0x1)

09:49:14 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
r8 = perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x1, 0xa1, 0x8, 0x0, 0x2, 0x1ece1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4f0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x40104, 0x2, 0x7fff, 0x9, 0xec, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0xffffffffffff0001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000640)='/(*!*%!,{!\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x56f9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6cb53def}]}, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
r9 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGFLAG(r9, 0x8004480e, &(0x7f00000007c0))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r8)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000800)={0x1, 0x0, 0x0, 0xffffff01, 0x9, 0xfffffff8})

[   65.676225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.679748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.680711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.682105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.683184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.684937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.688219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.690710] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.691792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.700704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.750260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.751743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.756288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.759467] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.761026] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.797754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   65.801578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   65.821633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   65.823226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   65.824238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   65.890751] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   65.903358] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   65.906656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   65.909595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   65.912136] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   65.919570] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   65.921300] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   65.925483] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   65.926277] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   65.926378] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   65.927184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   65.934174] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   65.936346] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   65.942418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   65.946356] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   65.948178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   65.951782] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   65.953587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   65.969222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   65.970661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   67.709156] Bluetooth: hci1: command tx timeout
[   67.774567] Bluetooth: hci0: command tx timeout
[   67.836578] Bluetooth: hci2: command tx timeout
[   67.900467] Bluetooth: hci3: command tx timeout
[   67.965173] Bluetooth: hci6: command tx timeout
[   67.965730] Bluetooth: hci4: command tx timeout
[   68.028456] Bluetooth: hci7: command tx timeout
[   68.029034] Bluetooth: hci5: command tx timeout
[   69.757040] Bluetooth: hci1: command tx timeout
[   69.820475] Bluetooth: hci0: command tx timeout
[   69.884678] Bluetooth: hci2: command tx timeout
[   69.949055] Bluetooth: hci3: command tx timeout
[   70.012567] Bluetooth: hci6: command tx timeout
[   70.012965] Bluetooth: hci4: command tx timeout
[   70.077422] Bluetooth: hci5: command tx timeout
[   70.077831] Bluetooth: hci7: command tx timeout
[   71.806875] Bluetooth: hci1: command tx timeout
[   71.869435] Bluetooth: hci0: command tx timeout
[   71.932917] Bluetooth: hci2: command tx timeout
[   71.997448] Bluetooth: hci3: command tx timeout
[   72.060602] Bluetooth: hci4: command tx timeout
[   72.061246] Bluetooth: hci6: command tx timeout
[   72.125205] Bluetooth: hci7: command tx timeout
[   72.125894] Bluetooth: hci5: command tx timeout
[   73.852490] Bluetooth: hci1: command tx timeout
[   73.918432] Bluetooth: hci0: command tx timeout
[   73.981416] Bluetooth: hci2: command tx timeout
[   74.044481] Bluetooth: hci3: command tx timeout
[   74.108468] Bluetooth: hci6: command tx timeout
[   74.108890] Bluetooth: hci4: command tx timeout
[   74.173424] Bluetooth: hci7: command tx timeout
[   74.173852] Bluetooth: hci5: command tx timeout
[   99.656948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.657620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.806713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.807376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.484492] audit: type=1400 audit(1768643390.639:8): avc:  denied  { kernel } for  pid=3768 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  100.518576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.519224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.628808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.634317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.738680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.739325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.784747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.785374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.934858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.935609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:49:51 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
r8 = perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x1, 0xa1, 0x8, 0x0, 0x2, 0x1ece1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4f0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x40104, 0x2, 0x7fff, 0x9, 0xec, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0xffffffffffff0001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000640)='/(*!*%!,{!\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x56f9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6cb53def}]}, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
r9 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGFLAG(r9, 0x8004480e, &(0x7f00000007c0))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r8)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000800)={0x1, 0x0, 0x0, 0xffffff01, 0x9, 0xfffffff8})

[  101.151143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.152159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.165877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.166465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:49:51 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000300)=0x8)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000340))
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380))
r6 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000400)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'})
ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000004c0)=0x1)

[  101.286343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.287015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.398554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.399206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.464881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.465639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.479921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.480609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.539079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.539704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.057684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.058300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.086447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.087023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:50:04 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
r4 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000480))
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000600)={0x0, 0x1, [@local]})
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000640)=0x2)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000680))
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000800))
r5 = openat$cgroup_ro(r3, &(0x7f0000000840)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000880)={'veth0_virt_wifi\x00', @local})

09:50:04 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000300)=0x8)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000340))
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380))
r6 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000400)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'})
ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000004c0)=0x1)

09:50:04 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
pipe2(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000004c0))
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000500))
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000580)='\x00')
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x40400, 0x0)
ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000600)={'custom1\x00'})

09:50:04 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
r8 = perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x1, 0xa1, 0x8, 0x0, 0x2, 0x1ece1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4f0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x40104, 0x2, 0x7fff, 0x9, 0xec, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0xffffffffffff0001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000640)='/(*!*%!,{!\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x56f9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6cb53def}]}, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
r9 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGFLAG(r9, 0x8004480e, &(0x7f00000007c0))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r8)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000800)={0x1, 0x0, 0x0, 0xffffff01, 0x9, 0xfffffff8})

09:50:04 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r4, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000980)=""/3)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x420080, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000d40)={0x9c, 0x0, &(0x7f0000000c00)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b40)={@ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/15, 0xf, 0x2, 0x8}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/152, 0x98, 0x2, 0x1b}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done={0x40106309, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x1}, @clear_death], 0x46, 0x0, &(0x7f0000000cc0)="cdaf609f600d346b15ec1d462a798c9a84807f8eb16373e775085843352a98f3f28c33f44128244068d2898330167e55a9f915c98ca978fa7c2a814c45df3bb7a00efe3e6047"})
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000d80))
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000dc0))
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000e00))

09:50:04 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000580))
pipe2(&(0x7f00000005c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f0000000600)={0x2, 0x100, 0x9, 0x3, 0x7fffffff, 0x6})
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000640))
ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000680))
ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000006c0)=0x1)

09:50:04 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'veth1_virt_wifi\x00'})
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000440)=0xe7)
r5 = geteuid()
ioctl$TUNSETOWNER(r3, 0x400454cc, r5)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:04 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000340))
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x1c)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000003c0))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000400))
r4 = fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)

09:50:04 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000580))
pipe2(&(0x7f00000005c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f0000000600)={0x2, 0x100, 0x9, 0x3, 0x7fffffff, 0x6})
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000640))
ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000680))
ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000006c0)=0x1)

09:50:04 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r4, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000980)=""/3)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x420080, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000d40)={0x9c, 0x0, &(0x7f0000000c00)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b40)={@ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/15, 0xf, 0x2, 0x8}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/152, 0x98, 0x2, 0x1b}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done={0x40106309, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x1}, @clear_death], 0x46, 0x0, &(0x7f0000000cc0)="cdaf609f600d346b15ec1d462a798c9a84807f8eb16373e775085843352a98f3f28c33f44128244068d2898330167e55a9f915c98ca978fa7c2a814c45df3bb7a00efe3e6047"})
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000d80))
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000dc0))
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000e00))

09:50:12 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
r8 = perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x1, 0xa1, 0x8, 0x0, 0x2, 0x1ece1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4f0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x40104, 0x2, 0x7fff, 0x9, 0xec, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0xffffffffffff0001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000640)='/(*!*%!,{!\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x56f9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6cb53def}]}, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
r9 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGFLAG(r9, 0x8004480e, &(0x7f00000007c0))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r8)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000800)={0x1, 0x0, 0x0, 0xffffff01, 0x9, 0xfffffff8})

09:50:12 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000300)=0x8)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000340))
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380))
r6 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000400)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'})
ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000004c0)=0x1)

09:50:12 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
r4 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000480))
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000600)={0x0, 0x1, [@local]})
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000640)=0x2)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000680))
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000800))
r5 = openat$cgroup_ro(r3, &(0x7f0000000840)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000880)={'veth0_virt_wifi\x00', @local})

09:50:12 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r4, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000980)=""/3)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x420080, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000d40)={0x9c, 0x0, &(0x7f0000000c00)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b40)={@ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/15, 0xf, 0x2, 0x8}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/152, 0x98, 0x2, 0x1b}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done={0x40106309, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x1}, @clear_death], 0x46, 0x0, &(0x7f0000000cc0)="cdaf609f600d346b15ec1d462a798c9a84807f8eb16373e775085843352a98f3f28c33f44128244068d2898330167e55a9f915c98ca978fa7c2a814c45df3bb7a00efe3e6047"})
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000d80))
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000dc0))
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000e00))

09:50:12 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000340))
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x1c)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000003c0))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000400))
r4 = fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)

09:50:12 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'veth1_virt_wifi\x00'})
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000440)=0xe7)
r5 = geteuid()
ioctl$TUNSETOWNER(r3, 0x400454cc, r5)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:12 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
pipe2(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000004c0))
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000500))
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000580)='\x00')
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x40400, 0x0)
ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000600)={'custom1\x00'})

09:50:12 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000580))
pipe2(&(0x7f00000005c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f0000000600)={0x2, 0x100, 0x9, 0x3, 0x7fffffff, 0x6})
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000640))
ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000680))
ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000006c0)=0x1)

09:50:12 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
r4 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000480))
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000600)={0x0, 0x1, [@local]})
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000640)=0x2)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000680))
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000800))
r5 = openat$cgroup_ro(r3, &(0x7f0000000840)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000880)={'veth0_virt_wifi\x00', @local})

09:50:12 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r4, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000980)=""/3)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x420080, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000d40)={0x9c, 0x0, &(0x7f0000000c00)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b40)={@ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/15, 0xf, 0x2, 0x8}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/152, 0x98, 0x2, 0x1b}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done={0x40106309, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x1}, @clear_death], 0x46, 0x0, &(0x7f0000000cc0)="cdaf609f600d346b15ec1d462a798c9a84807f8eb16373e775085843352a98f3f28c33f44128244068d2898330167e55a9f915c98ca978fa7c2a814c45df3bb7a00efe3e6047"})
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000d80))
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000dc0))

09:50:12 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'veth1_virt_wifi\x00'})
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000440)=0xe7)
r5 = geteuid()
ioctl$TUNSETOWNER(r3, 0x400454cc, r5)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:12 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000580))
pipe2(&(0x7f00000005c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f0000000600)={0x2, 0x100, 0x9, 0x3, 0x7fffffff, 0x6})
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000640))
ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000680))

09:50:12 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000300)=0x8)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000340))
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380))
r6 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000400)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'})

09:50:13 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
pipe2(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000004c0))
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000500))
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000580)='\x00')
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x40400, 0x0)
ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000600)={'custom1\x00'})

09:50:13 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000340))
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x1c)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000003c0))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000400))
r4 = fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)

09:50:13 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'veth1_virt_wifi\x00'})
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000440)=0xe7)
r5 = geteuid()
ioctl$TUNSETOWNER(r3, 0x400454cc, r5)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:13 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
r4 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000480))
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000600)={0x0, 0x1, [@local]})
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000640)=0x2)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000680))
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000800))
openat$cgroup_ro(r3, &(0x7f0000000840)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)

09:50:13 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r4, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000980)=""/3)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x420080, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000d40)={0x9c, 0x0, &(0x7f0000000c00)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b40)={@ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/15, 0xf, 0x2, 0x8}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/152, 0x98, 0x2, 0x1b}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done={0x40106309, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x1}, @clear_death], 0x46, 0x0, &(0x7f0000000cc0)="cdaf609f600d346b15ec1d462a798c9a84807f8eb16373e775085843352a98f3f28c33f44128244068d2898330167e55a9f915c98ca978fa7c2a814c45df3bb7a00efe3e6047"})
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000d80))

09:50:13 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
r8 = perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x1, 0xa1, 0x8, 0x0, 0x2, 0x1ece1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4f0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x40104, 0x2, 0x7fff, 0x9, 0xec, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0xffffffffffff0001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000640)='/(*!*%!,{!\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x56f9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6cb53def}]}, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
r9 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGFLAG(r9, 0x8004480e, &(0x7f00000007c0))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r8)

09:50:13 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000580))
pipe2(&(0x7f00000005c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f0000000600)={0x2, 0x100, 0x9, 0x3, 0x7fffffff, 0x6})
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000640))

09:50:21 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
r4 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000480))
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000600)={0x0, 0x1, [@local]})
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000640)=0x2)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000680))
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000800))

09:50:21 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000300)=0x8)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000340))
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380))
r6 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000400)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c)

09:50:21 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
r8 = perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x1, 0xa1, 0x8, 0x0, 0x2, 0x1ece1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4f0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x40104, 0x2, 0x7fff, 0x9, 0xec, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0xffffffffffff0001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000640)='/(*!*%!,{!\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x56f9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6cb53def}]}, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
r9 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGFLAG(r9, 0x8004480e, &(0x7f00000007c0))
socket$nl_generic(0x10, 0x3, 0x10)

09:50:21 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000340))
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x1c)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000003c0))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000400))
r4 = fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

09:50:21 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000580))
pipe2(&(0x7f00000005c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f0000000600)={0x2, 0x100, 0x9, 0x3, 0x7fffffff, 0x6})

09:50:21 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r4, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000980)=""/3)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x420080, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000d40)={0x9c, 0x0, &(0x7f0000000c00)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b40)={@ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/15, 0xf, 0x2, 0x8}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/152, 0x98, 0x2, 0x1b}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done={0x40106309, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x1}, @clear_death], 0x46, 0x0, &(0x7f0000000cc0)="cdaf609f600d346b15ec1d462a798c9a84807f8eb16373e775085843352a98f3f28c33f44128244068d2898330167e55a9f915c98ca978fa7c2a814c45df3bb7a00efe3e6047"})

09:50:21 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
pipe2(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000004c0))
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000500))
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000580)='\x00')
openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x40400, 0x0)

09:50:21 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'veth1_virt_wifi\x00'})
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000440)=0xe7)
geteuid()
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:21 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
r4 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000480))
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000600)={0x0, 0x1, [@local]})
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000640)=0x2)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000680))

09:50:21 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r3, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000980)=""/3)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x420080, 0x0)

09:50:21 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000300)=0x8)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000340))
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380))
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:50:21 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'veth1_virt_wifi\x00'})
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000440)=0xe7)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:21 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000580))
pipe2(&(0x7f00000005c0), 0x0)

09:50:29 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r3, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000980)=""/3)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:29 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
r3 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000480))
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000600)={0x0, 0x1, [@local]})
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000640)=0x2)

09:50:29 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000580))

09:50:29 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
pipe2(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000004c0))
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000500))
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000580)='\x00')

09:50:29 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000340))
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x1c)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000003c0))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000400))
r4 = fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

09:50:29 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
r8 = perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x1, 0xa1, 0x8, 0x0, 0x2, 0x1ece1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4f0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x40104, 0x2, 0x7fff, 0x9, 0xec, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0xffffffffffff0001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000640)='/(*!*%!,{!\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x56f9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6cb53def}]}, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
fsmount(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

09:50:29 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'veth1_virt_wifi\x00'})
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:29 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000300)=0x8)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000340))
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:50:29 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
r3 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000480))
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000600)={0x0, 0x1, [@local]})

09:50:29 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r3, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:29 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)

09:50:29 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1000)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:29 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84000)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000300)=0x8)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:50:29 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
pipe2(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000004c0))
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000500))
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:50:29 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
r3 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000480))

09:50:29 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r3, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:30 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000340))
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x1c)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000003c0))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000400))
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:50:30 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
pipe2(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000004c0))
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000500))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:50:30 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84000)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000300)=0x8)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:50:30 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r3, &(0x7f0000000900)='./file0\x00', 0x0)
openat$cgroup_int(r1, &(0x7f0000000940)='net_cls.classid\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:30 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000500)='sync\x00', 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:50:37 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
pipe2(&(0x7f00000002c0), 0x84000)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:50:37 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1000)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:37 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
r8 = perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x1, 0xa1, 0x8, 0x0, 0x2, 0x1ece1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4f0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x40104, 0x2, 0x7fff, 0x9, 0xec, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0xffffffffffff0001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000640)='/(*!*%!,{!\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x56f9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6cb53def}]}, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)

09:50:37 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
pipe2(&(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000004c0))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:50:37 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @decrefs], 0x91, 0x0, &(0x7f0000000340)="a1e0e85f2982fb53cd529ef2436795e0d7005586e3f42b23c6627fd3cadebc605f740efa4a2a96998d8c45686c6b10ff7737e03e6b99d6a2ba298416febfee1e6dfe4666de28f65b57f442d9a673e12a79223e7cd50c443e44cf8853c04c59120f2d274753566d6ecd9a4c740cb216ddaf24fe39856f5e819406ab88ef52f8f952f6bf1f1f8bfec914d2f1d8e9484d500f"})
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:50:37 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000340))
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x1c)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000003c0))
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:50:37 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
fspick(r3, &(0x7f0000000900)='./file0\x00', 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:37 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
r3 = fsmount(r0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/144, 0x90, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0xe, 0x0, &(0x7f0000000480)="7a9902cba79dc3b22a9a2371aff6"})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:50:37 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:37 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:37 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff}, 0x4800)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:50:46 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
pipe2(&(0x7f00000002c0), 0x800)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:50:46 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
r8 = perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x1, 0xa1, 0x8, 0x0, 0x2, 0x1ece1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4f0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x40104, 0x2, 0x7fff, 0x9, 0xec, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0xffffffffffff0001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000640)='/(*!*%!,{!\x00')
socket$nl_generic(0x10, 0x3, 0x10)

09:50:46 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000340))
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x1c)
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:50:46 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000880), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:46 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x3506)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:46 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
pipe2(&(0x7f0000000280), 0x4800)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:50:46 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
pipe2(&(0x7f0000000480), 0x4800)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:50:46 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
fsmount(r0, 0x1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:50:46 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:46 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000001c0)=""/201)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:50:46 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:50:46 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
inotify_init()
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:50:46 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000340))
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:50:46 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000300))
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:46 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
inotify_init1(0x80000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:50:46 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:50:46 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$cgroup_int(r2, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:54 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240))
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:50:54 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\\}\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:50:54 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xd, 0x60, 0x0, @buffer={0x0, 0xae, &(0x7f0000000200)=""/174}, &(0x7f00000002c0)="2925a13e63c9af323ecc6586c96087eded4863baf374afbce50ada98bcc4f59db3009b88443791d448c1e31e858501eb4da06f209657c2d571646f73ecb5db335ce6558495a82e21f7e44b073a78aa0fca92292bc042d4a75344360c8692a2f9", &(0x7f0000000340)=""/122, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:50:54 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:50:54 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:54 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x1, 0xa1, 0x8, 0x0, 0x2, 0x1ece1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4f0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x40104, 0x2, 0x7fff, 0x9, 0xec, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0xffffffffffff0001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

09:50:54 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x6, 0x4, 0x10, 0x0, 0x7fff, 0x14000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x1002, 0x8001, 0x4beb96d4, 0x9, 0x800, 0x401, 0xe9, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0x4, r2, 0x1)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:54 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:50:54 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:50:54 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:50:54 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
syz_open_dev$sg(&(0x7f0000000200), 0x3f, 0x121002)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:50:54 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:50:54 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
fsmount(0xffffffffffffffff, 0x1, 0x7a)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:50:54 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:50:54 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:54 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0))
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:50:54 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:50:54 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:50:54 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0))
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:50:54 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:51:02 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280))
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:51:02 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:51:02 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:51:02 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
write$tun(r1, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:51:02 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:51:02 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000180))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:51:02 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
socket$nl_generic(0x10, 0x3, 0x10)

09:51:02 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:02 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0xd, 0x3f, 0x1, 0x7, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffc01, 0x7}, 0x2, 0x7, 0x8000, 0x3, 0x4, 0xc9, 0x5, 0x0, 0x3ff, 0x0, 0x2}, r1, 0xb, r0, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:51:02 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:03 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r1 = fsmount(r0, 0x1, 0x4)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/255)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:51:03 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='[\x03@[+,(!\\%}.\\.\x00')
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:51:03 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000000c0)=""/162)
write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:51:03 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:03 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:51:03 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
fsmount(r0, 0x1, 0x4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:51:03 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7f, 0x0, 0xbf, 0x4, 0x0, 0x240000000000, 0x82, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x0, 0x1, 0x4, 0x245b, 0x4, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, r0, 0x9, r0, 0x8)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:51:03 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000780), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:51:03 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:03 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:51:03 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:51:03 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:51:12 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(%!)(\x00', &(0x7f0000000080)='./file0\x00', r0)
write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:51:12 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240))
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:51:12 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:51:12 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:51:12 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:51:12 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0))
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:12 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
socket$nl_generic(0x10, 0x3, 0x10)

09:51:12 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

[  188.096066] Bluetooth: hci6: command 0x0406 tx timeout
[  188.096722] Bluetooth: hci3: command 0x0406 tx timeout
[  188.097186] Bluetooth: hci0: command 0x0406 tx timeout
[  188.097695] Bluetooth: hci1: command 0x0406 tx timeout
[  188.097948] Bluetooth: hci2: command 0x0406 tx timeout
[  188.098144] Bluetooth: hci5: command 0x0406 tx timeout
[  188.099736] Bluetooth: hci4: command 0x0406 tx timeout
[  188.099829] Bluetooth: hci7: command 0x0406 tx timeout
09:51:20 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x30)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:51:20 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:51:20 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0)

09:51:20 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
socket$nl_generic(0x10, 0x3, 0x10)

09:51:20 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x20, 0x5, 0x80})
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:20 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:51:20 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x8)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:51:20 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:51:20 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:51:20 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
fsmount(0xffffffffffffffff, 0x0, 0x30)
write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:51:20 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:51:20 executing program 4:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xff)
write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:51:29 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:29 executing program 0:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:29 executing program 7:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:51:29 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:51:29 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:51:29 executing program 3:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x168, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x0, 0x10}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @exit_looper, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/249, 0xf9, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x5}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x2, 0x2, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f0000000680)="08d7b93b"})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:51:29 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1)
socket$nl_generic(0x10, 0x3, 0x10)

09:51:29 executing program 4:
write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x3, 0x4, 0x1, 0x1, 0x3, 0x8}, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "1050ee", 0x103, 0x21, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x73, 0x0, 0x62, 0x0, 0x0, 0x1e, 0x66}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x2, 0x15527f4a82535b55, 0x2, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "7f1909", 0x0, "42804f"}, "b9836e47f2ceb1744d80a9b79ab2efb3067ef3f07e5f81d841fddbb4f54cf572b49733c82ee7ead2c21eb1c30bb90842ac6cf8294f8fc1749550dd7f0bfc1b9dd92054897aff1edd138c45d0842cc55a7ac67226990783bdb81a98b2812f4efefc7b782ae1bde4a0ceb6ff842288e02fe59c88"}}}}}}}, 0x143)

09:51:29 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:29 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x48600, 0x0)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:51:29 executing program 7:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0)

09:51:29 executing program 3:
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:51:29 executing program 0:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:29 executing program 4:
write$tun(0xffffffffffffffff, 0x0, 0x0)

09:51:29 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:51:29 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:37 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0)

09:51:37 executing program 0:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:37 executing program 1:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:37 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\x03@[+,(!\\%}.\\.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:51:37 executing program 4:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:37 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
socket$nl_generic(0x10, 0x3, 0x10)

09:51:37 executing program 7:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x400040, 0x0)

09:51:37 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:51:37 executing program 4:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:37 executing program 1:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:37 executing program 7:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:37 executing program 3:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)

09:51:37 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:51:37 executing program 4:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:37 executing program 7:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:37 executing program 0:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:38 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

[  207.899695] 
[  207.899881] =====================================
[  207.900279] WARNING: bad unlock balance detected!
[  207.900661] 6.19.0-rc5-next-20260116 #1 Not tainted
[  207.901062] -------------------------------------
[  207.901449] syz-executor.0/279 is trying to release lock (rcu_read_lock) at:
[  207.902032] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  207.902568] but there are no more locks to release!
[  207.903231] 
[  207.903231] other info that might help us debug this:
[  207.904834] 4 locks held by syz-executor.0/279:
[  207.905869]  #0: ffff88800fa0c3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  207.908230]  #1: ffff888017f34698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  207.910369]  #2: ffff88800fa18950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  207.911968]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  207.912734] 
[  207.912734] stack backtrace:
[  207.913094] CPU: 0 UID: 0 PID: 279 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  207.913109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  207.913116] Call Trace:
[  207.913121]  <TASK>
[  207.913125]  dump_stack_lvl+0xca/0x120
[  207.913156]  ? __wait_on_freeing_inode+0x105/0x350
[  207.913171]  print_unlock_imbalance_bug+0x118/0x130
[  207.913187]  ? __wait_on_freeing_inode+0x105/0x350
[  207.913202]  lock_release+0x1ee/0x270
[  207.913217]  __wait_on_freeing_inode+0x10a/0x350
[  207.913233]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  207.913249]  ? __pfx_var_wake_function+0x10/0x10
[  207.913267]  ? lock_is_held_type+0x9e/0x120
[  207.913279]  insert_inode_locked+0x25f/0x890
[  207.913297]  __ext4_new_inode+0x223d/0x4cd0
[  207.913314]  ? __pfx___ext4_new_inode+0x10/0x10
[  207.913329]  ? __pfx_avc_has_perm+0x10/0x10
[  207.913343]  ? __pfx___dquot_initialize+0x10/0x10
[  207.913365]  ext4_mkdir+0x331/0xb30
[  207.913385]  ? __pfx_ext4_mkdir+0x10/0x10
[  207.913401]  ? security_inode_permission+0x72/0xe0
[  207.913414]  vfs_mkdir+0x6d8/0xc00
[  207.913431]  filename_mkdirat+0x118/0x430
[  207.913444]  ? __pfx_filename_mkdirat+0x10/0x10
[  207.913457]  ? strncpy_from_user+0x21b/0x2f0
[  207.913475]  __x64_sys_mkdir+0x6e/0xd0
[  207.913487]  do_syscall_64+0xbf/0x420
[  207.913501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.913514] RIP: 0033:0x7f95afe62c27
[  207.913523] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  207.913534] RSP: 002b:00007ffc43aebe68 EFLAGS: 00000202 ORIG_RAX: 0000000000000053
[  207.913545] RAX: ffffffffffffffda RBX: 00007ffc43aebef0 RCX: 00007f95afe62c27
[  207.913552] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffc43aebef0
[  207.913560] RBP: 00007ffc43aebecc R08: 0000000000000000 R09: 0000000000000004
[  207.913567] R10: 00007ffc43aebc06 R11: 0000000000000202 R12: 0000000000000032
[  207.913574] R13: 0000000000032b3e R14: 0000000000000001 R15: 00007ffc43aebf30
[  207.913584]  </TASK>
[  207.928991] ------------[ cut here ]------------
[  207.929374] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.0/279
[  207.931258] Modules linked in:
[  207.932184] CPU: 0 UID: 0 PID: 279 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  207.933137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  207.933846] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  207.934309] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  207.935783] RSP: 0018:ffff888019db79e0 EFLAGS: 00010286
[  207.936215] RAX: 00000000ffffffff RBX: ffff88801ab5d280 RCX: ffffffff815660f7
[  207.936831] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801ab5d67c
[  207.937443] RBP: ffff88801ab5d280 R08: 0000000000000000 R09: fffffbfff0ba7040
[  207.938007] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801ab5d280
[  207.938646] R13: 0000000000000001 R14: ffffffff85c0c660 R15: ffff88801b9b45d0
[  207.939223] FS:  00005555605fa400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000
[  207.946003] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  207.955914] CR2: 0000555560603c58 CR3: 000000001ed08000 CR4: 0000000000350ef0
[  207.956547] Call Trace:
[  207.956787]  <TASK>
[  207.957471]  __wait_on_freeing_inode+0x10f/0x350
[  207.958128]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  207.959243]  ? __pfx_var_wake_function+0x10/0x10
[  207.960626]  ? lock_is_held_type+0x9e/0x120
[  207.961749]  insert_inode_locked+0x25f/0x890
[  207.963348]  __ext4_new_inode+0x223d/0x4cd0
[  207.965836]  ? __pfx___ext4_new_inode+0x10/0x10
[  207.966775]  ? __pfx_avc_has_perm+0x10/0x10
[  207.967366]  ? __pfx___dquot_initialize+0x10/0x10
[  207.969590]  ext4_mkdir+0x331/0xb30
[  207.971515]  ? __pfx_ext4_mkdir+0x10/0x10
[  207.972105]  ? security_inode_permission+0x72/0xe0
[  207.973736]  vfs_mkdir+0x6d8/0xc00
[  207.975078]  filename_mkdirat+0x118/0x430
[  207.976092]  ? __pfx_filename_mkdirat+0x10/0x10
[  207.976855]  ? strncpy_from_user+0x21b/0x2f0
[  207.978744]  __x64_sys_mkdir+0x6e/0xd0
[  207.979340]  do_syscall_64+0xbf/0x420
[  207.980157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.980705] RIP: 0033:0x7f95afe62c27
[  207.981064] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  207.982528] RSP: 002b:00007ffc43aebe68 EFLAGS: 00000202 ORIG_RAX: 0000000000000053
[  207.983135] RAX: ffffffffffffffda RBX: 00007ffc43aebef0 RCX: 00007f95afe62c27
[  207.983740] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffc43aebef0
[  207.984312] RBP: 00007ffc43aebecc R08: 0000000000000000 R09: 0000000000000004
[  207.984942] R10: 00007ffc43aebc06 R11: 0000000000000202 R12: 0000000000000032
[  207.985552] R13: 0000000000032b3e R14: 0000000000000001 R15: 00007ffc43aebf30
[  207.988164]  </TASK>
[  207.988362] irq event stamp: 267509
[  207.988695] hardirqs last  enabled at (267509): [<ffffffff84d19a7c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  207.989606] hardirqs last disabled at (267508): [<ffffffff84d197d3>] _raw_spin_lock_irqsave+0x53/0x60
[  207.990443] softirqs last  enabled at (267504): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  207.991187] softirqs last disabled at (267502): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  207.992066] ---[ end trace 0000000000000000 ]---
09:51:45 executing program 7:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:45 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:51:45 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:51:45 executing program 3:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)

09:51:45 executing program 0:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:45 executing program 1:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:45 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c041)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
socket$netlink(0x10, 0x3, 0x4e9c884c6bb99cba)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x60000)
socket$nl_generic(0x10, 0x3, 0x10)

09:51:45 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)

09:51:45 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:45 executing program 7:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:45 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:45 executing program 7:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0xa01, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0)

09:51:45 executing program 5:
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x1)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1)

09:51:45 executing program 0:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:51:45 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
inotify_rm_watch(r1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
fsopen(&(0x7f0000000440)='esdfs\x00', 0x0)


VM DIAGNOSIS:
09:51:38  Registers:
info registers vcpu 0
RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff888019db74c8
R8 =0000000000000000 R9 =ffffed10016cf046 R10=0000000000000065 R11=666666203a302320
R12=0000000000000065 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120
RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555605fa400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555560603c58 CR3=000000001ed08000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff888042d07950
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff110085a0f2b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff888042d07988
RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555d1d4400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f161048f344 CR3=0000000045855000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000