Warning: Permanently added '[localhost]:49351' (ECDSA) to the list of known hosts.
2024/11/04 08:35:01 fuzzer started
2024/11/04 08:35:01 dialing manager at localhost:46317
syzkaller login: [   62.203390] cgroup: Unknown subsys name 'net'
[   62.296622] cgroup: Unknown subsys name 'cpuset'
[   62.328065] cgroup: Unknown subsys name 'rlimit'
2024/11/04 08:35:19 syscalls: 2217
2024/11/04 08:35:19 code coverage: enabled
2024/11/04 08:35:19 comparison tracing: enabled
2024/11/04 08:35:19 extra coverage: enabled
2024/11/04 08:35:19 setuid sandbox: enabled
2024/11/04 08:35:19 namespace sandbox: enabled
2024/11/04 08:35:19 Android sandbox: enabled
2024/11/04 08:35:19 fault injection: enabled
2024/11/04 08:35:19 leak checking: enabled
2024/11/04 08:35:19 net packet injection: enabled
2024/11/04 08:35:19 net device setup: enabled
2024/11/04 08:35:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/04 08:35:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/04 08:35:19 USB emulation: enabled
2024/11/04 08:35:19 hci packet injection: enabled
2024/11/04 08:35:19 wifi device emulation: enabled
2024/11/04 08:35:19 802.15.4 emulation: enabled
2024/11/04 08:35:19 fetching corpus: 0, signal 0/2000 (executing program)
2024/11/04 08:35:19 fetching corpus: 43, signal 14750/18341 (executing program)
2024/11/04 08:35:19 fetching corpus: 93, signal 27330/32190 (executing program)
2024/11/04 08:35:19 fetching corpus: 143, signal 35481/41501 (executing program)
2024/11/04 08:35:19 fetching corpus: 193, signal 41895/49017 (executing program)
2024/11/04 08:35:19 fetching corpus: 243, signal 49027/57003 (executing program)
2024/11/04 08:35:19 fetching corpus: 293, signal 54250/62984 (executing program)
2024/11/04 08:35:20 fetching corpus: 343, signal 58543/68097 (executing program)
2024/11/04 08:35:20 fetching corpus: 393, signal 64647/74632 (executing program)
2024/11/04 08:35:20 fetching corpus: 443, signal 67614/78252 (executing program)
2024/11/04 08:35:20 fetching corpus: 492, signal 70585/81803 (executing program)
2024/11/04 08:35:20 fetching corpus: 542, signal 74959/86476 (executing program)
2024/11/04 08:35:20 fetching corpus: 592, signal 77022/89095 (executing program)
2024/11/04 08:35:20 fetching corpus: 642, signal 78892/91505 (executing program)
2024/11/04 08:35:20 fetching corpus: 692, signal 80292/93513 (executing program)
2024/11/04 08:35:20 fetching corpus: 742, signal 83017/96491 (executing program)
2024/11/04 08:35:20 fetching corpus: 792, signal 85005/98803 (executing program)
2024/11/04 08:35:21 fetching corpus: 842, signal 86731/100885 (executing program)
2024/11/04 08:35:21 fetching corpus: 892, signal 89085/103354 (executing program)
2024/11/04 08:35:21 fetching corpus: 942, signal 91019/105491 (executing program)
2024/11/04 08:35:21 fetching corpus: 992, signal 92679/107390 (executing program)
2024/11/04 08:35:21 fetching corpus: 1042, signal 93524/108682 (executing program)
2024/11/04 08:35:21 fetching corpus: 1092, signal 94635/110116 (executing program)
2024/11/04 08:35:21 fetching corpus: 1142, signal 95964/111633 (executing program)
2024/11/04 08:35:21 fetching corpus: 1192, signal 98171/113781 (executing program)
2024/11/04 08:35:21 fetching corpus: 1242, signal 101086/116272 (executing program)
2024/11/04 08:35:22 fetching corpus: 1292, signal 102226/117571 (executing program)
2024/11/04 08:35:22 fetching corpus: 1342, signal 103889/119131 (executing program)
2024/11/04 08:35:22 fetching corpus: 1392, signal 105136/120406 (executing program)
2024/11/04 08:35:22 fetching corpus: 1442, signal 105993/121421 (executing program)
2024/11/04 08:35:22 fetching corpus: 1492, signal 107108/122593 (executing program)
2024/11/04 08:35:22 fetching corpus: 1542, signal 108605/123943 (executing program)
2024/11/04 08:35:22 fetching corpus: 1592, signal 109495/124926 (executing program)
2024/11/04 08:35:22 fetching corpus: 1642, signal 111352/126352 (executing program)
2024/11/04 08:35:23 fetching corpus: 1692, signal 112686/127484 (executing program)
2024/11/04 08:35:23 fetching corpus: 1742, signal 113362/128255 (executing program)
2024/11/04 08:35:23 fetching corpus: 1792, signal 114006/129007 (executing program)
2024/11/04 08:35:23 fetching corpus: 1842, signal 115283/130022 (executing program)
2024/11/04 08:35:23 fetching corpus: 1892, signal 116998/131180 (executing program)
2024/11/04 08:35:23 fetching corpus: 1942, signal 117882/131912 (executing program)
2024/11/04 08:35:23 fetching corpus: 1992, signal 119496/132975 (executing program)
2024/11/04 08:35:23 fetching corpus: 2042, signal 120639/133788 (executing program)
2024/11/04 08:35:24 fetching corpus: 2092, signal 121801/134555 (executing program)
2024/11/04 08:35:24 fetching corpus: 2142, signal 123012/135321 (executing program)
2024/11/04 08:35:24 fetching corpus: 2192, signal 123849/135910 (executing program)
2024/11/04 08:35:24 fetching corpus: 2242, signal 124626/136423 (executing program)
2024/11/04 08:35:24 fetching corpus: 2292, signal 125591/137016 (executing program)
2024/11/04 08:35:24 fetching corpus: 2342, signal 127161/137817 (executing program)
2024/11/04 08:35:24 fetching corpus: 2392, signal 127643/138164 (executing program)
2024/11/04 08:35:25 fetching corpus: 2442, signal 128563/138655 (executing program)
2024/11/04 08:35:25 fetching corpus: 2492, signal 129159/139070 (executing program)
2024/11/04 08:35:25 fetching corpus: 2542, signal 130061/139487 (executing program)
2024/11/04 08:35:25 fetching corpus: 2592, signal 131235/139982 (executing program)
2024/11/04 08:35:25 fetching corpus: 2642, signal 131839/140295 (executing program)
2024/11/04 08:35:25 fetching corpus: 2692, signal 132453/140600 (executing program)
2024/11/04 08:35:25 fetching corpus: 2742, signal 133370/140951 (executing program)
2024/11/04 08:35:26 fetching corpus: 2792, signal 134018/141219 (executing program)
2024/11/04 08:35:26 fetching corpus: 2842, signal 135242/141609 (executing program)
2024/11/04 08:35:26 fetching corpus: 2892, signal 135919/141850 (executing program)
2024/11/04 08:35:26 fetching corpus: 2942, signal 136511/142020 (executing program)
2024/11/04 08:35:26 fetching corpus: 2992, signal 136806/142195 (executing program)
2024/11/04 08:35:26 fetching corpus: 3042, signal 137685/142419 (executing program)
2024/11/04 08:35:26 fetching corpus: 3092, signal 138181/142558 (executing program)
2024/11/04 08:35:26 fetching corpus: 3142, signal 138782/142674 (executing program)
2024/11/04 08:35:27 fetching corpus: 3192, signal 139157/142770 (executing program)
2024/11/04 08:35:27 fetching corpus: 3242, signal 139810/142893 (executing program)
2024/11/04 08:35:27 fetching corpus: 3292, signal 140447/142984 (executing program)
2024/11/04 08:35:27 fetching corpus: 3342, signal 141015/143050 (executing program)
2024/11/04 08:35:27 fetching corpus: 3392, signal 141463/143102 (executing program)
2024/11/04 08:35:27 fetching corpus: 3442, signal 141924/143131 (executing program)
2024/11/04 08:35:27 fetching corpus: 3473, signal 142142/143145 (executing program)
2024/11/04 08:35:27 fetching corpus: 3473, signal 142142/143154 (executing program)
2024/11/04 08:35:27 fetching corpus: 3473, signal 142142/143154 (executing program)
2024/11/04 08:35:30 starting 8 fuzzer processes
08:35:30 executing program 0:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:35:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2275, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

08:35:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200))

08:35:30 executing program 3:
set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)

08:35:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)={0x14, 0x13, 0x101, 0x0, 0x0, "", [@generic='?']}, 0x14}], 0x1}, 0x0)

[   91.058953] audit: type=1400 audit(1730709330.712:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:35:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xd29, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}])

08:35:30 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:35:30 executing program 7:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil)
mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3)

[   92.423191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.425807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.426818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.430819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.434474] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   92.435459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.510179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.513249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.515813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.517846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.520704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.520718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.521188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.522784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.525252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.525391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.529225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.532507] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   92.533401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.536061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.536714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.537066] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.537631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.541748] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   92.546394] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   92.549720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.550595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.552175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.570745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.576186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.589558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.601926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.606234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.608793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   92.610784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   92.611426] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.612769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.613643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   92.619114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   92.622349] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.628256] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   92.629687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   92.634843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   92.637211] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   92.640051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   92.663242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.673374] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   92.692294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   94.454470] Bluetooth: hci0: command tx timeout
[   94.582955] Bluetooth: hci4: command tx timeout
[   94.646034] Bluetooth: hci3: command tx timeout
[   94.646660] Bluetooth: hci2: command tx timeout
[   94.709968] Bluetooth: hci1: command tx timeout
[   94.710589] Bluetooth: hci7: command tx timeout
[   94.774463] Bluetooth: hci5: command tx timeout
[   94.775084] Bluetooth: hci6: command tx timeout
[   96.502040] Bluetooth: hci0: command tx timeout
[   96.630072] Bluetooth: hci4: command tx timeout
[   96.694026] Bluetooth: hci2: command tx timeout
[   96.694498] Bluetooth: hci3: command tx timeout
[   96.758348] Bluetooth: hci7: command tx timeout
[   96.758822] Bluetooth: hci1: command tx timeout
[   96.822927] Bluetooth: hci6: command tx timeout
[   96.823417] Bluetooth: hci5: command tx timeout
[   98.550921] Bluetooth: hci0: command tx timeout
[   98.677952] Bluetooth: hci4: command tx timeout
[   98.742393] Bluetooth: hci3: command tx timeout
[   98.743003] Bluetooth: hci2: command tx timeout
[   98.805951] Bluetooth: hci1: command tx timeout
[   98.806410] Bluetooth: hci7: command tx timeout
[   98.870178] Bluetooth: hci5: command tx timeout
[   98.870658] Bluetooth: hci6: command tx timeout
[  100.599036] Bluetooth: hci0: command tx timeout
[  100.725968] Bluetooth: hci4: command tx timeout
[  100.790021] Bluetooth: hci2: command tx timeout
[  100.790500] Bluetooth: hci3: command tx timeout
[  100.853945] Bluetooth: hci1: command tx timeout
[  100.854397] Bluetooth: hci7: command tx timeout
[  100.918063] Bluetooth: hci6: command tx timeout
[  100.918633] Bluetooth: hci5: command tx timeout
[  152.876283] syz-executor.4 (285) used greatest stack depth: 23664 bytes left
[  155.394532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  155.398888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  155.401231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  155.409973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  155.412160] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  155.419449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  155.456783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  155.460050] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  155.462317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  155.469614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  155.478040] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  155.480948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  155.485173] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  155.490449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  155.491727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  155.496011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  155.503201] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  155.506649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  155.572190] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  155.585314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  155.587196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  155.597372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.598678] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  155.604035] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.605419] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  155.606405] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.623090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  155.631267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.633776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  155.634946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  155.650210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  155.668719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  155.705231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  155.718164] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  155.723352] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  155.744753] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  155.749212] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  155.757378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  155.782303] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  155.836233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  155.846536] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  155.862321] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  155.863671] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  155.864309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  155.894414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  155.908998] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  155.950954] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  155.958221] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  157.494023] Bluetooth: hci0: command tx timeout
[  157.559909] Bluetooth: hci1: command tx timeout
[  157.560640] Bluetooth: hci2: command tx timeout
[  157.686076] Bluetooth: hci3: command tx timeout
[  157.750068] Bluetooth: hci4: command tx timeout
[  157.942131] Bluetooth: hci6: command tx timeout
[  157.942159] Bluetooth: hci5: command tx timeout
[  158.390003] Bluetooth: hci7: command tx timeout
[  159.543886] Bluetooth: hci0: command tx timeout
[  159.606280] Bluetooth: hci2: command tx timeout
[  159.606336] Bluetooth: hci1: command tx timeout
[  159.734069] Bluetooth: hci3: command tx timeout
[  159.799904] Bluetooth: hci4: command tx timeout
[  159.989933] Bluetooth: hci6: command tx timeout
[  159.990022] Bluetooth: hci5: command tx timeout
[  160.437984] Bluetooth: hci7: command tx timeout
[  161.589933] Bluetooth: hci0: command tx timeout
[  161.653934] Bluetooth: hci2: command tx timeout
[  161.654969] Bluetooth: hci1: command tx timeout
[  161.784878] Bluetooth: hci3: command tx timeout
[  161.846042] Bluetooth: hci4: command tx timeout
[  162.037997] Bluetooth: hci6: command tx timeout
[  162.038455] Bluetooth: hci5: command tx timeout
[  162.485953] Bluetooth: hci7: command tx timeout
[  163.637962] Bluetooth: hci0: command tx timeout
[  163.701926] Bluetooth: hci1: command tx timeout
[  163.702054] Bluetooth: hci2: command tx timeout
[  163.829918] Bluetooth: hci3: command tx timeout
[  163.893986] Bluetooth: hci4: command tx timeout
[  164.087897] Bluetooth: hci5: command tx timeout
[  164.087941] Bluetooth: hci6: command tx timeout
[  164.535116] Bluetooth: hci7: command tx timeout
[  210.954279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.955139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.289788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.290612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.700262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.701767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.920706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.922023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.067011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.067807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.176339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.178059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.341966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.343165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.484191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.485590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.617403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.617482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:37:32 executing program 3:
set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)

[  212.810612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.812031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:37:32 executing program 3:
set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)

[  213.052206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.053712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:37:32 executing program 3:
set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)

[  213.180063] audit: type=1400 audit(1730709452.831:8): avc:  denied  { open } for  pid=7237 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  213.187446] audit: type=1400 audit(1730709452.832:9): avc:  denied  { kernel } for  pid=7237 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  213.341793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.342993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.442731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.443912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:37:33 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0xffffff1f00000000)

08:37:33 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

[  213.614194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.615052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:37:33 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0xffffff1f00000000)

08:37:33 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:37:33 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0xffffff1f00000000)

[  213.883069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.883876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.919173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.919779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.915335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  216.937207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  216.948689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  216.971598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  216.975248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  216.978239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  217.037657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  217.041326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  217.046223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  217.056747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  217.065338] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  217.067062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  217.100546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  217.100704] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  217.107104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  217.109962] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  217.110596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  217.133543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  217.143406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  217.151103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  217.157655] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  217.159892] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  217.162461] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  217.177207] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  217.178357] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  217.182932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  217.190189] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.193748] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  217.200934] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  217.210963] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  217.217516] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  217.225291] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  217.228210] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  217.246498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  217.253190] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  217.262364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  219.061935] Bluetooth: hci1: command tx timeout
[  219.190038] Bluetooth: hci3: command tx timeout
[  219.253965] Bluetooth: hci6: command tx timeout
[  219.254014] Bluetooth: hci5: command tx timeout
[  219.255501] Bluetooth: hci4: command tx timeout
[  219.381997] Bluetooth: hci7: command tx timeout
[  221.110547] Bluetooth: hci1: command tx timeout
[  221.237943] Bluetooth: hci3: command tx timeout
[  221.302286] Bluetooth: hci6: command tx timeout
[  221.302758] Bluetooth: hci4: command tx timeout
[  221.304235] Bluetooth: hci5: command tx timeout
[  221.430906] Bluetooth: hci7: command tx timeout
[  223.157977] Bluetooth: hci1: command tx timeout
[  223.286945] Bluetooth: hci3: command tx timeout
[  223.349991] Bluetooth: hci5: command tx timeout
[  223.350070] Bluetooth: hci4: command tx timeout
[  223.350506] Bluetooth: hci6: command tx timeout
[  223.478881] Bluetooth: hci7: command tx timeout
[  225.206943] Bluetooth: hci1: command tx timeout
[  225.335046] Bluetooth: hci3: command tx timeout
[  225.399082] Bluetooth: hci5: command tx timeout
[  225.399546] Bluetooth: hci6: command tx timeout
[  225.400617] Bluetooth: hci4: command tx timeout
[  225.527480] Bluetooth: hci7: command tx timeout
[  261.113479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.114181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.380328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.381042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.281069] audit: type=1400 audit(1730709501.934:10): avc:  denied  { write } for  pid=9734 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  264.417012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.417709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.523362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.524050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.675376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.676066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.828333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.829005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.985863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.986483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.121973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.122594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.181814] hrtimer: interrupt took 23845 ns
[  265.629325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.630031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.661682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.662341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.524720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.525680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.559532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.560306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.935301] loop5: detected capacity change from 0 to 40
08:38:28 executing program 7:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil)
mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3)

08:38:28 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200))

08:38:28 executing program 0:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:28 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0xffffff1f00000000)

08:38:28 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:28 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2275, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

08:38:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)={0x14, 0x13, 0x101, 0x0, 0x0, "", [@generic='?']}, 0x14}], 0x1}, 0x0)

08:38:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xd29, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}])

[  269.181317] loop5: detected capacity change from 0 to 40
08:38:28 executing program 0:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)={0x14, 0x13, 0x101, 0x0, 0x0, "", [@generic='?']}, 0x14}], 0x1}, 0x0)

08:38:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)={0x14, 0x13, 0x101, 0x0, 0x0, "", [@generic='?']}, 0x14}], 0x1}, 0x0)

08:38:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xd29, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}])

08:38:28 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200))

08:38:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xd29, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}])

08:38:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xd29, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}])

08:38:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200))

08:38:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xd29, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}])

08:38:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2275, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

08:38:30 executing program 7:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil)
mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3)

08:38:30 executing program 0:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:30 executing program 6:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

[  271.281718] loop5: detected capacity change from 0 to 40
08:38:31 executing program 7:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil)
mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3)

08:38:31 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2275, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

08:38:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xd29, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}])

[  271.520456] loop5: detected capacity change from 0 to 40
08:38:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xd29, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}])

08:38:31 executing program 1:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

[  277.945109] Bluetooth: hci2: command 0x0406 tx timeout
[  277.945888] Bluetooth: hci0: command 0x0406 tx timeout
08:38:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xd29, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}])

08:38:43 executing program 7:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:43 executing program 2:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:43 executing program 6:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:43 executing program 5:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil)
mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3)

08:38:43 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:43 executing program 1:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xd29, &(0x7f0000000780)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}])

08:38:44 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:44 executing program 6:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:44 executing program 2:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:44 executing program 5:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil)
mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3)

08:38:44 executing program 7:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:44 executing program 1:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:44 executing program 7:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:44 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:44 executing program 5:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil)
mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3)

08:38:44 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:44 executing program 2:
r0 = pkey_alloc(0x0, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1)
pkey_free(0xffffffffffffffff)
r2 = pkey_alloc(0x0, 0x3)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3)

08:38:44 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget(0x0, 0x4000, 0x5a5282321f74239d, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)

08:38:45 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 3:
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

08:38:45 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0)

08:38:45 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:45 executing program 6:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0)
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100))

08:38:45 executing program 3:
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

08:38:46 executing program 3:
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

08:38:46 executing program 3:
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

08:38:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8)

08:38:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8)

08:38:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8)

08:38:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8)

08:38:46 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x90d, 0x4)

[  287.290420] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
08:38:52 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:52 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:52 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0)

08:38:52 executing program 6:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0)
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100))

08:38:52 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x90d, 0x4)

08:38:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget(0x0, 0x4000, 0x5a5282321f74239d, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)

08:38:52 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCGETA(r4, 0x560c, 0x0)
sendfile(r4, r0, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:38:52 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0)

08:38:52 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x90d, 0x4)

08:38:52 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x90d, 0x4)

08:38:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget(0x0, 0x4000, 0x5a5282321f74239d, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)

08:38:58 executing program 6:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0)
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100))

08:38:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0)

08:38:58 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0)

08:38:58 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget(0x0, 0x4000, 0x5a5282321f74239d, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)

08:38:58 executing program 7:
msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32)
msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000)
msgget(0x1, 0x84)
r0 = msgget(0x3, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215)

08:38:58 executing program 2:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0)
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100))

08:38:58 executing program 3:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0)
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100))

08:38:58 executing program 5:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'})
ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff)

08:38:58 executing program 7:
msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32)
msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000)
msgget(0x1, 0x84)
r0 = msgget(0x3, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215)

08:38:58 executing program 0:
msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32)
msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000)
msgget(0x1, 0x84)
r0 = msgget(0x3, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215)

08:38:58 executing program 7:
msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32)
msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000)
msgget(0x1, 0x84)
r0 = msgget(0x3, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215)

08:38:58 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0)

08:38:58 executing program 0:
msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32)
msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000)
msgget(0x1, 0x84)
r0 = msgget(0x3, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215)

08:38:58 executing program 4:
msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32)
msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000)
msgget(0x1, 0x84)
r0 = msgget(0x3, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215)

08:38:58 executing program 2:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0)
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100))

08:38:58 executing program 0:
msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32)
msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000)
msgget(0x1, 0x84)
r0 = msgget(0x3, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215)

08:38:59 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0)

08:38:59 executing program 4:
msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32)
msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000)
msgget(0x1, 0x84)
r0 = msgget(0x3, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215)

08:38:59 executing program 6:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0)
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100))

08:38:59 executing program 2:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0)
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100))

08:38:59 executing program 0:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'})
ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff)

08:38:59 executing program 3:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0)
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100))

08:38:59 executing program 7:
msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32)
msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000)
msgget(0x1, 0x84)
r0 = msgget(0x3, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215)

08:38:59 executing program 5:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'})
ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff)

08:39:00 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getitimer(0x1, &(0x7f0000000100))

08:39:00 executing program 4:
msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32)
msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000)
msgget(0x1, 0x84)
r0 = msgget(0x3, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215)

08:39:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

08:39:02 executing program 0:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'})
ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff)

08:39:02 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgid(0xffffffffffffffff)
r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00')
pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0)

08:39:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x2a, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x34000}]}]}, 0x24}], 0x1}, 0x0)

08:39:02 executing program 3:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0)
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100))

08:39:02 executing program 5:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'})
ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff)

08:39:02 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]})

08:39:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x2a, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x34000}]}]}, 0x24}], 0x1}, 0x0)

08:39:10 executing program 0:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'})
ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff)

08:39:10 executing program 5:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'})
ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff)

08:39:10 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgid(0xffffffffffffffff)
r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00')
pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0)

08:39:10 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]})

08:39:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x2a, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x34000}]}]}, 0x24}], 0x1}, 0x0)

08:39:10 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getitimer(0x1, &(0x7f0000000100))

08:39:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgid(0xffffffffffffffff)
r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00')
pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0)

08:39:10 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

08:39:10 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]})

08:39:10 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getitimer(0x1, &(0x7f0000000100))

08:39:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x2a, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x34000}]}]}, 0x24}], 0x1}, 0x0)

08:39:10 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

08:39:10 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getitimer(0x1, &(0x7f0000000100))

08:39:10 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

08:39:10 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]})

08:39:10 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgid(0xffffffffffffffff)
r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00')
pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0)

08:39:10 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x6, "910fea622803"}})

08:39:10 executing program 5:
clock_adjtime(0xa, &(0x7f0000000000))

08:39:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgid(0xffffffffffffffff)
r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00')
pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0)

08:39:11 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc)
pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d)

08:39:11 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

08:39:11 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00')
fchmod(r1, 0x121)
getpgid(0xffffffffffffffff)
r2 = getpid()
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1)
signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00')
getpid()

08:39:11 executing program 5:
clock_adjtime(0xa, &(0x7f0000000000))

08:39:11 executing program 1:
unshare(0x2010400)
unshare(0x50b00)
unshare(0x8000000)
unshare(0x300)
unshare(0x10040000)
unshare(0x7010900)
unshare(0x24060000)
unshare(0x2060180)
unshare(0x100)
unshare(0xa80)
unshare(0x38000100)
unshare(0x24000400)
unshare(0x0)
unshare(0x40800)
unshare(0x100)
unshare(0x50000)
unshare(0x4030600)

08:39:11 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x6, "910fea622803"}})

08:39:11 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgid(0xffffffffffffffff)
r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00')
pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0)

08:39:11 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc)
pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d)

08:39:11 executing program 5:
clock_adjtime(0xa, &(0x7f0000000000))

08:39:11 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc)
pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d)

08:39:11 executing program 5:
clock_adjtime(0xa, &(0x7f0000000000))

08:39:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}]}, 0x1c}}, 0x0)

08:39:12 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00')
fchmod(r1, 0x121)
getpgid(0xffffffffffffffff)
r2 = getpid()
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1)
signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00')
getpid()

08:39:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x6, "910fea622803"}})

08:39:12 executing program 1:
unshare(0x2010400)
unshare(0x50b00)
unshare(0x8000000)
unshare(0x300)
unshare(0x10040000)
unshare(0x7010900)
unshare(0x24060000)
unshare(0x2060180)
unshare(0x100)
unshare(0xa80)
unshare(0x38000100)
unshare(0x24000400)
unshare(0x0)
unshare(0x40800)
unshare(0x100)
unshare(0x50000)
unshare(0x4030600)

08:39:12 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc)
pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d)

08:39:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}]}, 0x1c}}, 0x0)

08:39:12 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgid(0xffffffffffffffff)
r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00')
pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0)

08:39:12 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc)
pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d)

08:39:12 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00')
fchmod(r1, 0x121)
getpgid(0xffffffffffffffff)
r2 = getpid()
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1)
signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00')
getpid()

08:39:12 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc)
pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d)

08:39:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}]}, 0x1c}}, 0x0)

08:39:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x6, "910fea622803"}})

08:39:12 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00')
fchmod(r1, 0x121)
getpgid(0xffffffffffffffff)
r2 = getpid()
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1)
signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00')
getpid()

08:39:12 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00')
fchmod(r1, 0x121)
getpgid(0xffffffffffffffff)
r2 = getpid()
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1)
signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00')
getpid()

08:39:12 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc)
pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d)

08:39:12 executing program 1:
unshare(0x2010400)
unshare(0x50b00)
unshare(0x8000000)
unshare(0x300)
unshare(0x10040000)
unshare(0x7010900)
unshare(0x24060000)
unshare(0x2060180)
unshare(0x100)
unshare(0xa80)
unshare(0x38000100)
unshare(0x24000400)
unshare(0x0)
unshare(0x40800)
unshare(0x100)
unshare(0x50000)
unshare(0x4030600)

08:39:12 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00')
fchmod(r1, 0x121)
getpgid(0xffffffffffffffff)
r2 = getpid()
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1)
signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00')
getpid()

08:39:12 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00')
fchmod(r1, 0x121)
getpgid(0xffffffffffffffff)
r2 = getpid()
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1)
signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00')
getpid()

08:39:12 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00')
fchmod(r1, 0x121)
getpgid(0xffffffffffffffff)
r2 = getpid()
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1)
signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00')
getpid()

08:39:12 executing program 1:
unshare(0x2010400)
unshare(0x50b00)
unshare(0x8000000)
unshare(0x300)
unshare(0x10040000)
unshare(0x7010900)
unshare(0x24060000)
unshare(0x2060180)
unshare(0x100)
unshare(0xa80)
unshare(0x38000100)
unshare(0x24000400)
unshare(0x0)
unshare(0x40800)
unshare(0x100)
unshare(0x50000)
unshare(0x4030600)

08:39:12 executing program 3:
unshare(0x2010400)
unshare(0x50b00)
unshare(0x8000000)
unshare(0x300)
unshare(0x10040000)
unshare(0x7010900)
unshare(0x24060000)
unshare(0x2060180)
unshare(0x100)
unshare(0xa80)
unshare(0x38000100)
unshare(0x24000400)
unshare(0x0)
unshare(0x40800)
unshare(0x100)
unshare(0x50000)
unshare(0x4030600)

[  336.713981] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.2:10424]
[  336.714703] Modules linked in:
[  336.715013] irq event stamp: 2437771
[  336.715351] hardirqs last  enabled at (2437770): [<ffffffff848397ab>] irqentry_exit+0x3b/0x90
[  336.716145] hardirqs last disabled at (2437771): [<ffffffff8483816f>] sysvec_apic_timer_interrupt+0xf/0x80
[  336.719118] softirqs last  enabled at (2420224): [<ffffffff811a851c>] handle_softirqs+0x50c/0x770
[  336.721242] softirqs last disabled at (2420227): [<ffffffff811a8f24>] irq_exit_rcu+0x94/0xc0
[  336.721980] CPU: 1 UID: 0 PID: 10424 Comm: syz-executor.2 Not tainted 6.12.0-rc5-next-20241104 #1
[  336.722745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  336.723449] RIP: 0010:unwind_get_return_address+0x59/0xa0
[  336.723961] Code: 5d e9 bb 4a 71 03 48 b8 00 00 00 00 00 fc ff df 48 8d 6b 58 48 89 ea 48 c1 ea 03 80 3c 02 00 75 36 48 8b 7b 58 e8 57 64 0d 00 <85> c0 74 cf 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80
[  336.725462] RSP: 0018:ffff88806cf08dc0 EFLAGS: 00000202
[  336.725947] RAX: 0000000000000001 RBX: ffff88806cf08dd8 RCX: 0000000000000001
[  336.726562] RDX: 1ffff1100d9e11c6 RSI: ffff88806cf09c88 RDI: ffffffff84597f38
[  336.727180] RBP: ffff88806cf08e30 R08: 0000000000000001 R09: ffff88806cf08e18
[  336.727802] R10: 000000000003c001 R11: 00000000000b7a06 R12: ffff88806cf08ea0
[  336.728421] R13: 0000000000000000 R14: ffff8880137ad280 R15: 0000000000092820
[  336.729036] FS:  00007ff7c4188700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  336.729745] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  336.730262] CR2: 0000001b32d29000 CR3: 000000002ced8000 CR4: 0000000000350ef0
[  336.730882] Call Trace:
[  336.731128]  <IRQ>
[  336.731343]  ? watchdog_timer_fn+0x3ee/0x510
[  336.731784]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  336.732247]  ? __hrtimer_run_queues+0x57c/0xa70
[  336.732714]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  336.733183]  ? ktime_get_update_offsets_now+0x260/0x3c0
[  336.733688]  ? hrtimer_interrupt+0x2f2/0x750
[  336.734134]  ? __sysvec_apic_timer_interrupt+0xc2/0x330
[  336.734629]  ? sysvec_apic_timer_interrupt+0x34/0x80
[  336.735105]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  336.735629]  ? ieee80211_rx_list+0x1e38/0x2840
[  336.736094]  ? unwind_get_return_address+0x59/0xa0
[  336.736552]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  336.737043]  arch_stack_walk+0x9d/0xf0
[  336.737446]  ? ieee80211_rx_list+0x1e38/0x2840
[  336.737901]  stack_trace_save+0x8f/0xc0
[  336.738277]  ? __pfx_stack_trace_save+0x10/0x10
[  336.738713]  ? tick_program_event+0xac/0x140
[  336.739151]  ? srso_return_thunk+0x5/0x5f
[  336.739556]  ? hrtimer_interrupt+0x589/0x750
[  336.740000]  kasan_save_stack+0x24/0x50
[  336.740383]  ? kasan_save_stack+0x24/0x50
[  336.740776]  ? kasan_save_track+0x14/0x30
[  336.741170]  ? __kasan_slab_alloc+0x59/0x70
[  336.741578]  ? kmem_cache_alloc_noprof+0x13d/0x3d0
[  336.742061]  ? __alloc_object+0x2f/0x270
[  336.742457]  ? __create_object+0x1d/0x80
[  336.742848]  ? __kmalloc_noprof+0x37e/0x4b0
[  336.743271]  ? ieee802_11_parse_elems_full+0xec/0x15a0
[  336.743782]  ? ieee80211_inform_bss+0xf7/0x10b0
[  336.744235]  ? cfg80211_inform_single_bss_data+0x7fe/0x1c50
[  336.744758]  ? cfg80211_inform_bss_data+0x20f/0x3510
[  336.745230]  ? cfg80211_inform_bss_frame_data+0x250/0x690
[  336.745738]  ? ieee80211_bss_info_update+0x2f6/0xa90
[  336.746218]  ? ieee80211_scan_rx+0x474/0xac0
[  336.746650]  ? srso_return_thunk+0x5/0x5f
[  336.747055]  ? lockdep_hardirqs_on_prepare+0x12b/0x3f0
[  336.747558]  ? srso_return_thunk+0x5/0x5f
[  336.747993]  ? ___slab_alloc+0x4f1/0x1200
[  336.748397]  ? ___slab_alloc+0x2ff/0x1200
[  336.748810]  ? __alloc_object+0x2f/0x270
[  336.749225]  kasan_save_track+0x14/0x30
[  336.749605]  __kasan_slab_alloc+0x59/0x70
[  336.750009]  kmem_cache_alloc_noprof+0x13d/0x3d0
[  336.750467]  ? srso_return_thunk+0x5/0x5f
[  336.750875]  ? ieee802_11_parse_elems_full+0xa0/0x15a0
[  336.751384]  ? ieee802_11_parse_elems_full+0xec/0x15a0
[  336.751896]  __alloc_object+0x2f/0x270
[  336.752282]  __create_object+0x1d/0x80
[  336.752669]  ? ieee802_11_parse_elems_full+0xec/0x15a0
[  336.753165]  __kmalloc_noprof+0x37e/0x4b0
[  336.753573]  ? srso_return_thunk+0x5/0x5f
[  336.753980]  ? ktime_get+0x171/0x270
[  336.754359]  ? __pfx_mark_lock+0x10/0x10
[  336.754770]  ieee802_11_parse_elems_full+0xec/0x15a0
[  336.755260]  ? srso_return_thunk+0x5/0x5f
[  336.755680]  ? srso_return_thunk+0x5/0x5f
[  336.756083]  ? hrtimer_interrupt+0x589/0x750
[  336.756522]  ? srso_return_thunk+0x5/0x5f
[  336.756928]  ? mark_held_locks+0x9e/0xe0
[  336.757335]  ? __pfx_ieee802_11_parse_elems_full+0x10/0x10
[  336.757859]  ? srso_return_thunk+0x5/0x5f
[  336.758262]  ? lockdep_hardirqs_on_prepare+0x12b/0x3f0
[  336.758764]  ? srso_return_thunk+0x5/0x5f
[  336.759193]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  336.759688]  ieee80211_inform_bss+0xf7/0x10b0
[  336.760123]  ? srso_return_thunk+0x5/0x5f
[  336.760540]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  336.761028]  ? lock_acquire+0x32/0xc0
[  336.761412]  ? cfg80211_inform_single_bss_data+0x6c8/0x1c50
[  336.761945]  cfg80211_inform_single_bss_data+0x7fe/0x1c50
[  336.762457]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  336.762945]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  336.763492]  ? __pfx___lock_acquire+0x10/0x10
[  336.763981]  ? __pfx_mark_lock+0x10/0x10
[  336.764382]  ? __pfx_lock_release+0x10/0x10
[  336.764811]  ? trace_lock_acquire+0x137/0x1b0
[  336.765257]  cfg80211_inform_bss_data+0x20f/0x3510
[  336.765726]  ? srso_return_thunk+0x5/0x5f
[  336.766130]  ? srso_return_thunk+0x5/0x5f
[  336.766548]  ? __pfx_mark_lock+0x10/0x10
[  336.766957]  ? srso_return_thunk+0x5/0x5f
[  336.767361]  ? hlock_class+0x4e/0x130
[  336.767739]  ? srso_return_thunk+0x5/0x5f
[  336.768144]  ? mark_lock+0xac/0x1370
[  336.768521]  ? srso_return_thunk+0x5/0x5f
[  336.768926]  ? mark_lock+0xac/0x1370
[  336.769303]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  336.769802]  ? __pfx_mark_lock+0x10/0x10
[  336.770204]  ? __pfx_mark_lock+0x10/0x10
[  336.770606]  ? mark_lock+0xac/0x1370
[  336.770987]  ? __pfx___lock_acquire+0x10/0x10
[  336.771436]  ? srso_return_thunk+0x5/0x5f
[  336.771853]  ? hlock_class+0x4e/0x130
[  336.772225]  ? srso_return_thunk+0x5/0x5f
[  336.772629]  ? __lock_acquire+0xccf/0x4430
[  336.773085]  ? __pfx_mark_lock+0x10/0x10
[  336.773495]  ? srso_return_thunk+0x5/0x5f
[  336.773898]  ? find_held_lock+0x2c/0x110
[  336.774292]  ? ieee80211_bss_info_update+0x2b4/0xa90
[  336.774777]  ? srso_return_thunk+0x5/0x5f
[  336.775185]  ? lock_release+0x20f/0x6f0
[  336.775592]  cfg80211_inform_bss_frame_data+0x250/0x690
[  336.776122]  ieee80211_bss_info_update+0x2f6/0xa90
[  336.776599]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  336.777111]  ? kcov_remote_start+0x211/0x5b0
[  336.777546]  ? srso_return_thunk+0x5/0x5f
[  336.777968]  ? srso_return_thunk+0x5/0x5f
[  336.778372]  ? ieee80211_get_channel_khz+0x149/0x1d0
[  336.778851]  ieee80211_scan_rx+0x474/0xac0
[  336.779266]  ? ieee80211_clean_skb+0x18f/0x6f0
[  336.779725]  ieee80211_rx_list+0x1e38/0x2840
[  336.780177]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  336.780629]  ? ieee80211_rx_napi+0x97/0x3b0
[  336.781074]  ? srso_return_thunk+0x5/0x5f
[  336.781474]  ? lock_acquire+0x32/0xc0
[  336.781863]  ? ieee80211_rx_napi+0x97/0x3b0
[  336.782291]  ieee80211_rx_napi+0xdc/0x3b0
[  336.782700]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  336.783165]  ? srso_return_thunk+0x5/0x5f
[  336.783570]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  336.784061]  ieee80211_handle_queued_frames+0xd9/0x130
[  336.784565]  tasklet_action_common+0x235/0x3b0
[  336.784996]  ? workqueue_softirq_action+0x1a/0x170
[  336.785479]  handle_softirqs+0x1b1/0x770
[  336.785877]  irq_exit_rcu+0x94/0xc0
[  336.786225]  sysvec_apic_timer_interrupt+0x70/0x80
[  336.786688]  </IRQ>
[  336.786910]  <TASK>
[  336.787133]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  336.787625] RIP: 0010:put_cpu_partial+0x10a/0x1b0
[  336.788101] Code: 24 28 75 5b 49 c7 44 24 28 00 00 00 00 4c 89 e7 48 8d 35 00 00 00 00 e8 54 9f ab ff 4d 85 ed 74 06 e8 2a 6d d5 ff fb 4d 85 f6 <74> 1c 5b 4c 89 f6 48 89 ef 5d 41 5c 41 5d 41 5e e9 c1 fa ff ff 44
[  336.789613] RSP: 0018:ffff88802de1f6d0 EFLAGS: 00000246
[  336.790095] RAX: 000000000023e0a7 RBX: ffffea0000377140 RCX: 1ffffffff0fde6c7
[  336.790712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81846b56
[  336.791328] RBP: ffff888008c4f780 R08: 0000000000000001 R09: fffffbfff0fdc5e9
[  336.791958] R10: ffffffff87ee2f4f R11: 00000000000007e0 R12: ffff88806cf40350
[  336.792572] R13: 0000000000000200 R14: 0000000000000000 R15: ffff88800ddc55c8
[  336.793203]  ? put_cpu_partial+0x106/0x1b0
[  336.793632]  qlist_free_all+0x50/0x160
[  336.794010]  kasan_quarantine_reduce+0x19f/0x240
[  336.794459]  __kasan_slab_alloc+0x49/0x70
[  336.794865]  kmem_cache_alloc_lru_noprof+0x14c/0x3c0
[  336.795354]  ? proc_alloc_inode+0x27/0x210
[  336.795786]  ? get_pid_task+0xfd/0x250
[  336.796170]  proc_alloc_inode+0x27/0x210
[  336.796568]  ? __pfx_proc_alloc_inode+0x10/0x10
[  336.797018]  alloc_inode+0x63/0x240
[  336.797379]  new_inode+0x1c/0x190
[  336.797725]  proc_pid_make_inode+0x21/0x170
[  336.798151]  proc_pident_instantiate+0x85/0x320
[  336.798606]  proc_pident_lookup+0x211/0x2a0
[  336.799045]  lookup_open.isra.0+0x79a/0x1550
[  336.799485]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  336.799956]  ? srso_return_thunk+0x5/0x5f
[  336.800376]  ? path_openat+0x13a4/0x2980
[  336.800798]  ? mnt_get_write_access+0x1ea/0x2d0
[  336.801253]  path_openat+0xc91/0x2980
[  336.801660]  ? __pfx_path_openat+0x10/0x10
[  336.802084]  ? __pfx___lock_acquire+0x10/0x10
[  336.802523]  ? srso_return_thunk+0x5/0x5f
[  336.802929]  ? find_held_lock+0x2c/0x110
[  336.803333]  do_filp_open+0x1b8/0x410
[  336.803731]  ? __pfx_do_filp_open+0x10/0x10
[  336.804156]  ? find_held_lock+0x2c/0x110
[  336.804568]  ? __pfx_kfree_link+0x10/0x10
[  336.804967]  ? lock_acquire+0x32/0xc0
[  336.805357]  ? srso_return_thunk+0x5/0x5f
[  336.805770]  ? _raw_spin_unlock+0x1e/0x40
[  336.806162]  ? srso_return_thunk+0x5/0x5f
[  336.806568]  ? alloc_fd+0x2c0/0x560
[  336.806955]  do_sys_openat2+0x164/0x1d0
[  336.807350]  ? __pfx_do_sys_openat2+0x10/0x10
[  336.807791]  ? ktime_get+0x171/0x270
[  336.808174]  ? srso_return_thunk+0x5/0x5f
[  336.808579]  ? srso_return_thunk+0x5/0x5f
[  336.808991]  ? clockevents_program_event+0x135/0x360
[  336.809469]  __x64_sys_openat+0x143/0x200
[  336.809871]  ? __pfx___x64_sys_openat+0x10/0x10
[  336.810339]  do_syscall_64+0xbf/0x1d0
[  336.810726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.811209] RIP: 0033:0x7ff7c6bc5a04
[  336.811554] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[  336.813108] RSP: 002b:00007ff7c4188060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  336.813779] RAX: ffffffffffffffda RBX: 00007ff7c6d25f60 RCX: 00007ff7c6bc5a04
[  336.814402] RDX: 0000000000000002 RSI: 00007ff7c41880f0 RDI: 00000000ffffff9c
[  336.815030] RBP: 00007ff7c41880f0 R08: 0000000000000000 R09: 00007ff7c4187f70
[  336.815646] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  336.816274] R13: 00007ffd3ae941bf R14: 00007ff7c4188300 R15: 0000000000022000
[  336.816923]  </TASK>
[  336.817148] Sending NMI from CPU 1 to CPUs 0:
[  336.817581] NMI backtrace for cpu 0 skipped: idling at default_idle+0x1e/0x30
[  339.260997] Bluetooth: hci3: command 0x0406 tx timeout
[  339.318884] Bluetooth: hci1: command 0x0406 tx timeout
[  343.351365] Bluetooth: hci7: command 0x0406 tx timeout
[  343.352728] Bluetooth: hci6: command 0x0406 tx timeout
[  343.356203] Bluetooth: hci4: command 0x0406 tx timeout
[  343.357411] Bluetooth: hci5: command 0x0406 tx timeout

VM DIAGNOSIS:
08:39:36  Registers:
info registers vcpu 0
RAX=00000000001635b7 RBX=0000000000000000 RCX=ffffffff84839b17 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff812ae2ca RBP=dffffc0000000000 RSP=ffffffff85a07e10
R8 =0000000000000001 R9 =ffffed100d9c6cba R10=ffff88806ce365d3 R11=0000000000000000
R12=ffffffff863f7790 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8483aabe RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f35d24e65e0 CR3=0000000016394000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=d4f51932056e8ef30ef3d5a2604d95f9
XMM02=f8d90105b2f23cfc675f634d8c4ed804 XMM03=b5d303368b896c020b79a9420188fc80
XMM04=202c3072286c6176656d69745f6b636f XMM05=38737336a94a2c636f9da9060bf78af3
XMM06=78307b3d293038303030303030303066 XMM07=25772718bf16628dc8a5e2b80d01129d
XMM08=7a4be7d584d79377af3819b8b492d947 XMM09=00000000000000000000000000000000
XMM10=0c0d0e0f08090a0b0405060700010203 XMM11=000000c002344f700000000000ea89c0
XMM12=9e2f3b4f45b07eb27d6e39dd7786bf0c XMM13=df9993920949a200388ac620c86f3a75
XMM14=00c70568a9f3bf3159fa7c3310872d78 XMM15=2bda6385f52518b6e25806111f704799
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8263f685 RDI=ffffffff8866f580 RBP=ffffffff8866f540 RSP=ffff88806cf08610
R8 =0000000000000000 R9 =ffffed1001708046 R10=0000000000000020 R11=7371726974666f73
R12=0000000000000020 R13=ffffffff8866f540 R14=0000000000000010 R15=ffffffff8263f670
RIP=ffffffff8263f6dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ff7c4188700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32d29000 CR3=000000002ced8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000