Warning: Permanently added '[localhost]:49351' (ECDSA) to the list of known hosts. 2024/11/04 08:35:01 fuzzer started 2024/11/04 08:35:01 dialing manager at localhost:46317 syzkaller login: [ 62.203390] cgroup: Unknown subsys name 'net' [ 62.296622] cgroup: Unknown subsys name 'cpuset' [ 62.328065] cgroup: Unknown subsys name 'rlimit' 2024/11/04 08:35:19 syscalls: 2217 2024/11/04 08:35:19 code coverage: enabled 2024/11/04 08:35:19 comparison tracing: enabled 2024/11/04 08:35:19 extra coverage: enabled 2024/11/04 08:35:19 setuid sandbox: enabled 2024/11/04 08:35:19 namespace sandbox: enabled 2024/11/04 08:35:19 Android sandbox: enabled 2024/11/04 08:35:19 fault injection: enabled 2024/11/04 08:35:19 leak checking: enabled 2024/11/04 08:35:19 net packet injection: enabled 2024/11/04 08:35:19 net device setup: enabled 2024/11/04 08:35:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/04 08:35:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/04 08:35:19 USB emulation: enabled 2024/11/04 08:35:19 hci packet injection: enabled 2024/11/04 08:35:19 wifi device emulation: enabled 2024/11/04 08:35:19 802.15.4 emulation: enabled 2024/11/04 08:35:19 fetching corpus: 0, signal 0/2000 (executing program) 2024/11/04 08:35:19 fetching corpus: 43, signal 14750/18341 (executing program) 2024/11/04 08:35:19 fetching corpus: 93, signal 27330/32190 (executing program) 2024/11/04 08:35:19 fetching corpus: 143, signal 35481/41501 (executing program) 2024/11/04 08:35:19 fetching corpus: 193, signal 41895/49017 (executing program) 2024/11/04 08:35:19 fetching corpus: 243, signal 49027/57003 (executing program) 2024/11/04 08:35:19 fetching corpus: 293, signal 54250/62984 (executing program) 2024/11/04 08:35:20 fetching corpus: 343, signal 58543/68097 (executing program) 2024/11/04 08:35:20 fetching corpus: 393, signal 64647/74632 (executing program) 2024/11/04 08:35:20 fetching corpus: 443, signal 67614/78252 (executing program) 2024/11/04 08:35:20 fetching corpus: 492, signal 70585/81803 (executing program) 2024/11/04 08:35:20 fetching corpus: 542, signal 74959/86476 (executing program) 2024/11/04 08:35:20 fetching corpus: 592, signal 77022/89095 (executing program) 2024/11/04 08:35:20 fetching corpus: 642, signal 78892/91505 (executing program) 2024/11/04 08:35:20 fetching corpus: 692, signal 80292/93513 (executing program) 2024/11/04 08:35:20 fetching corpus: 742, signal 83017/96491 (executing program) 2024/11/04 08:35:20 fetching corpus: 792, signal 85005/98803 (executing program) 2024/11/04 08:35:21 fetching corpus: 842, signal 86731/100885 (executing program) 2024/11/04 08:35:21 fetching corpus: 892, signal 89085/103354 (executing program) 2024/11/04 08:35:21 fetching corpus: 942, signal 91019/105491 (executing program) 2024/11/04 08:35:21 fetching corpus: 992, signal 92679/107390 (executing program) 2024/11/04 08:35:21 fetching corpus: 1042, signal 93524/108682 (executing program) 2024/11/04 08:35:21 fetching corpus: 1092, signal 94635/110116 (executing program) 2024/11/04 08:35:21 fetching corpus: 1142, signal 95964/111633 (executing program) 2024/11/04 08:35:21 fetching corpus: 1192, signal 98171/113781 (executing program) 2024/11/04 08:35:21 fetching corpus: 1242, signal 101086/116272 (executing program) 2024/11/04 08:35:22 fetching corpus: 1292, signal 102226/117571 (executing program) 2024/11/04 08:35:22 fetching corpus: 1342, signal 103889/119131 (executing program) 2024/11/04 08:35:22 fetching corpus: 1392, signal 105136/120406 (executing program) 2024/11/04 08:35:22 fetching corpus: 1442, signal 105993/121421 (executing program) 2024/11/04 08:35:22 fetching corpus: 1492, signal 107108/122593 (executing program) 2024/11/04 08:35:22 fetching corpus: 1542, signal 108605/123943 (executing program) 2024/11/04 08:35:22 fetching corpus: 1592, signal 109495/124926 (executing program) 2024/11/04 08:35:22 fetching corpus: 1642, signal 111352/126352 (executing program) 2024/11/04 08:35:23 fetching corpus: 1692, signal 112686/127484 (executing program) 2024/11/04 08:35:23 fetching corpus: 1742, signal 113362/128255 (executing program) 2024/11/04 08:35:23 fetching corpus: 1792, signal 114006/129007 (executing program) 2024/11/04 08:35:23 fetching corpus: 1842, signal 115283/130022 (executing program) 2024/11/04 08:35:23 fetching corpus: 1892, signal 116998/131180 (executing program) 2024/11/04 08:35:23 fetching corpus: 1942, signal 117882/131912 (executing program) 2024/11/04 08:35:23 fetching corpus: 1992, signal 119496/132975 (executing program) 2024/11/04 08:35:23 fetching corpus: 2042, signal 120639/133788 (executing program) 2024/11/04 08:35:24 fetching corpus: 2092, signal 121801/134555 (executing program) 2024/11/04 08:35:24 fetching corpus: 2142, signal 123012/135321 (executing program) 2024/11/04 08:35:24 fetching corpus: 2192, signal 123849/135910 (executing program) 2024/11/04 08:35:24 fetching corpus: 2242, signal 124626/136423 (executing program) 2024/11/04 08:35:24 fetching corpus: 2292, signal 125591/137016 (executing program) 2024/11/04 08:35:24 fetching corpus: 2342, signal 127161/137817 (executing program) 2024/11/04 08:35:24 fetching corpus: 2392, signal 127643/138164 (executing program) 2024/11/04 08:35:25 fetching corpus: 2442, signal 128563/138655 (executing program) 2024/11/04 08:35:25 fetching corpus: 2492, signal 129159/139070 (executing program) 2024/11/04 08:35:25 fetching corpus: 2542, signal 130061/139487 (executing program) 2024/11/04 08:35:25 fetching corpus: 2592, signal 131235/139982 (executing program) 2024/11/04 08:35:25 fetching corpus: 2642, signal 131839/140295 (executing program) 2024/11/04 08:35:25 fetching corpus: 2692, signal 132453/140600 (executing program) 2024/11/04 08:35:25 fetching corpus: 2742, signal 133370/140951 (executing program) 2024/11/04 08:35:26 fetching corpus: 2792, signal 134018/141219 (executing program) 2024/11/04 08:35:26 fetching corpus: 2842, signal 135242/141609 (executing program) 2024/11/04 08:35:26 fetching corpus: 2892, signal 135919/141850 (executing program) 2024/11/04 08:35:26 fetching corpus: 2942, signal 136511/142020 (executing program) 2024/11/04 08:35:26 fetching corpus: 2992, signal 136806/142195 (executing program) 2024/11/04 08:35:26 fetching corpus: 3042, signal 137685/142419 (executing program) 2024/11/04 08:35:26 fetching corpus: 3092, signal 138181/142558 (executing program) 2024/11/04 08:35:26 fetching corpus: 3142, signal 138782/142674 (executing program) 2024/11/04 08:35:27 fetching corpus: 3192, signal 139157/142770 (executing program) 2024/11/04 08:35:27 fetching corpus: 3242, signal 139810/142893 (executing program) 2024/11/04 08:35:27 fetching corpus: 3292, signal 140447/142984 (executing program) 2024/11/04 08:35:27 fetching corpus: 3342, signal 141015/143050 (executing program) 2024/11/04 08:35:27 fetching corpus: 3392, signal 141463/143102 (executing program) 2024/11/04 08:35:27 fetching corpus: 3442, signal 141924/143131 (executing program) 2024/11/04 08:35:27 fetching corpus: 3473, signal 142142/143145 (executing program) 2024/11/04 08:35:27 fetching corpus: 3473, signal 142142/143154 (executing program) 2024/11/04 08:35:27 fetching corpus: 3473, signal 142142/143154 (executing program) 2024/11/04 08:35:30 starting 8 fuzzer processes 08:35:30 executing program 0: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:35:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:35:30 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)) 08:35:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) 08:35:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)={0x14, 0x13, 0x101, 0x0, 0x0, "", [@generic='?']}, 0x14}], 0x1}, 0x0) [ 91.058953] audit: type=1400 audit(1730709330.712:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:35:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) 08:35:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:35:30 executing program 7: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3) [ 92.423191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.425807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.426818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.430819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.434474] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.435459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.510179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.513249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.515813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.517846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.520704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.520718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.521188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.522784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.525252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.525391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.529225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.532507] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.533401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.536061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.536714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.537066] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.537631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.541748] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.546394] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.549720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.550595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.552175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.570745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.576186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.589558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.601926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.606234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.608793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.610784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.611426] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.612769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.613643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.619114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.622349] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.628256] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.629687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.634843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.637211] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.640051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.663242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.673374] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.692294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.454470] Bluetooth: hci0: command tx timeout [ 94.582955] Bluetooth: hci4: command tx timeout [ 94.646034] Bluetooth: hci3: command tx timeout [ 94.646660] Bluetooth: hci2: command tx timeout [ 94.709968] Bluetooth: hci1: command tx timeout [ 94.710589] Bluetooth: hci7: command tx timeout [ 94.774463] Bluetooth: hci5: command tx timeout [ 94.775084] Bluetooth: hci6: command tx timeout [ 96.502040] Bluetooth: hci0: command tx timeout [ 96.630072] Bluetooth: hci4: command tx timeout [ 96.694026] Bluetooth: hci2: command tx timeout [ 96.694498] Bluetooth: hci3: command tx timeout [ 96.758348] Bluetooth: hci7: command tx timeout [ 96.758822] Bluetooth: hci1: command tx timeout [ 96.822927] Bluetooth: hci6: command tx timeout [ 96.823417] Bluetooth: hci5: command tx timeout [ 98.550921] Bluetooth: hci0: command tx timeout [ 98.677952] Bluetooth: hci4: command tx timeout [ 98.742393] Bluetooth: hci3: command tx timeout [ 98.743003] Bluetooth: hci2: command tx timeout [ 98.805951] Bluetooth: hci1: command tx timeout [ 98.806410] Bluetooth: hci7: command tx timeout [ 98.870178] Bluetooth: hci5: command tx timeout [ 98.870658] Bluetooth: hci6: command tx timeout [ 100.599036] Bluetooth: hci0: command tx timeout [ 100.725968] Bluetooth: hci4: command tx timeout [ 100.790021] Bluetooth: hci2: command tx timeout [ 100.790500] Bluetooth: hci3: command tx timeout [ 100.853945] Bluetooth: hci1: command tx timeout [ 100.854397] Bluetooth: hci7: command tx timeout [ 100.918063] Bluetooth: hci6: command tx timeout [ 100.918633] Bluetooth: hci5: command tx timeout [ 152.876283] syz-executor.4 (285) used greatest stack depth: 23664 bytes left [ 155.394532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.398888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.401231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.409973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.412160] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.419449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.456783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.460050] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.462317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.469614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.478040] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.480948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.485173] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.490449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.491727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.496011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.503201] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.506649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.572190] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.585314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.587196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.597372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.598678] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.604035] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.605419] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.606405] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.623090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.631267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.633776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.634946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.650210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.668719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.705231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.718164] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.723352] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.744753] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.749212] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.757378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.782303] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.836233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.846536] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.862321] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.863671] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.864309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.894414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.908998] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.950954] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.958221] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.494023] Bluetooth: hci0: command tx timeout [ 157.559909] Bluetooth: hci1: command tx timeout [ 157.560640] Bluetooth: hci2: command tx timeout [ 157.686076] Bluetooth: hci3: command tx timeout [ 157.750068] Bluetooth: hci4: command tx timeout [ 157.942131] Bluetooth: hci6: command tx timeout [ 157.942159] Bluetooth: hci5: command tx timeout [ 158.390003] Bluetooth: hci7: command tx timeout [ 159.543886] Bluetooth: hci0: command tx timeout [ 159.606280] Bluetooth: hci2: command tx timeout [ 159.606336] Bluetooth: hci1: command tx timeout [ 159.734069] Bluetooth: hci3: command tx timeout [ 159.799904] Bluetooth: hci4: command tx timeout [ 159.989933] Bluetooth: hci6: command tx timeout [ 159.990022] Bluetooth: hci5: command tx timeout [ 160.437984] Bluetooth: hci7: command tx timeout [ 161.589933] Bluetooth: hci0: command tx timeout [ 161.653934] Bluetooth: hci2: command tx timeout [ 161.654969] Bluetooth: hci1: command tx timeout [ 161.784878] Bluetooth: hci3: command tx timeout [ 161.846042] Bluetooth: hci4: command tx timeout [ 162.037997] Bluetooth: hci6: command tx timeout [ 162.038455] Bluetooth: hci5: command tx timeout [ 162.485953] Bluetooth: hci7: command tx timeout [ 163.637962] Bluetooth: hci0: command tx timeout [ 163.701926] Bluetooth: hci1: command tx timeout [ 163.702054] Bluetooth: hci2: command tx timeout [ 163.829918] Bluetooth: hci3: command tx timeout [ 163.893986] Bluetooth: hci4: command tx timeout [ 164.087897] Bluetooth: hci5: command tx timeout [ 164.087941] Bluetooth: hci6: command tx timeout [ 164.535116] Bluetooth: hci7: command tx timeout [ 210.954279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.955139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.289788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.290612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.700262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.701767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.920706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.922023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.067011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.067807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.176339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.178059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.341966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.343165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.484191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.485590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.617403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.617482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:37:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 212.810612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.812031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:37:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 213.052206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.053712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:37:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 213.180063] audit: type=1400 audit(1730709452.831:8): avc: denied { open } for pid=7237 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 213.187446] audit: type=1400 audit(1730709452.832:9): avc: denied { kernel } for pid=7237 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 213.341793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.342993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.442731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.443912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:37:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0xffffff1f00000000) 08:37:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 213.614194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.615052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:37:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0xffffff1f00000000) 08:37:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:37:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0xffffff1f00000000) [ 213.883069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.883876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.919173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.919779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.915335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.937207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.948689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.971598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.975248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.978239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.037657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.041326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.046223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.056747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.065338] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.067062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.100546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.100704] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.107104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.109962] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.110596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.133543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.143406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.151103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.157655] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.159892] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.162461] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.177207] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.178357] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.182932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.190189] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.193748] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.200934] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.210963] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.217516] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.225291] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.228210] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.246498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.253190] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.262364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.061935] Bluetooth: hci1: command tx timeout [ 219.190038] Bluetooth: hci3: command tx timeout [ 219.253965] Bluetooth: hci6: command tx timeout [ 219.254014] Bluetooth: hci5: command tx timeout [ 219.255501] Bluetooth: hci4: command tx timeout [ 219.381997] Bluetooth: hci7: command tx timeout [ 221.110547] Bluetooth: hci1: command tx timeout [ 221.237943] Bluetooth: hci3: command tx timeout [ 221.302286] Bluetooth: hci6: command tx timeout [ 221.302758] Bluetooth: hci4: command tx timeout [ 221.304235] Bluetooth: hci5: command tx timeout [ 221.430906] Bluetooth: hci7: command tx timeout [ 223.157977] Bluetooth: hci1: command tx timeout [ 223.286945] Bluetooth: hci3: command tx timeout [ 223.349991] Bluetooth: hci5: command tx timeout [ 223.350070] Bluetooth: hci4: command tx timeout [ 223.350506] Bluetooth: hci6: command tx timeout [ 223.478881] Bluetooth: hci7: command tx timeout [ 225.206943] Bluetooth: hci1: command tx timeout [ 225.335046] Bluetooth: hci3: command tx timeout [ 225.399082] Bluetooth: hci5: command tx timeout [ 225.399546] Bluetooth: hci6: command tx timeout [ 225.400617] Bluetooth: hci4: command tx timeout [ 225.527480] Bluetooth: hci7: command tx timeout [ 261.113479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.114181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.380328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.381042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.281069] audit: type=1400 audit(1730709501.934:10): avc: denied { write } for pid=9734 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 264.417012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.417709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.523362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.524050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.675376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.676066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.828333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.829005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.985863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.986483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.121973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.122594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.181814] hrtimer: interrupt took 23845 ns [ 265.629325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.630031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.661682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.662341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.524720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.525680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.559532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.560306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.935301] loop5: detected capacity change from 0 to 40 08:38:28 executing program 7: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3) 08:38:28 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)) 08:38:28 executing program 0: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0xffffff1f00000000) 08:38:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:38:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)={0x14, 0x13, 0x101, 0x0, 0x0, "", [@generic='?']}, 0x14}], 0x1}, 0x0) 08:38:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) [ 269.181317] loop5: detected capacity change from 0 to 40 08:38:28 executing program 0: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)={0x14, 0x13, 0x101, 0x0, 0x0, "", [@generic='?']}, 0x14}], 0x1}, 0x0) 08:38:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)={0x14, 0x13, 0x101, 0x0, 0x0, "", [@generic='?']}, 0x14}], 0x1}, 0x0) 08:38:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) 08:38:28 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)) 08:38:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) 08:38:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) 08:38:30 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)) 08:38:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) 08:38:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:38:30 executing program 7: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3) 08:38:30 executing program 0: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:30 executing program 6: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) [ 271.281718] loop5: detected capacity change from 0 to 40 08:38:31 executing program 7: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3) 08:38:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:38:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) [ 271.520456] loop5: detected capacity change from 0 to 40 08:38:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) 08:38:31 executing program 1: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) [ 277.945109] Bluetooth: hci2: command 0x0406 tx timeout [ 277.945888] Bluetooth: hci0: command 0x0406 tx timeout 08:38:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) 08:38:43 executing program 7: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:43 executing program 2: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:43 executing program 6: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:43 executing program 5: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3) 08:38:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:43 executing program 1: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) 08:38:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:44 executing program 6: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:44 executing program 2: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:44 executing program 5: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3) 08:38:44 executing program 7: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:44 executing program 1: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:44 executing program 7: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:44 executing program 5: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mbind(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, 0x3) 08:38:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:44 executing program 2: r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x20, 0xffffffff, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r1) pkey_free(0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r3) 08:38:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget(0x0, 0x4000, 0x5a5282321f74239d, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 08:38:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 08:38:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0) 08:38:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:45 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) 08:38:45 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 08:38:46 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 08:38:46 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 08:38:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 08:38:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 08:38:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 08:38:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 08:38:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x90d, 0x4) [ 287.290420] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 08:38:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0) 08:38:52 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) 08:38:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x90d, 0x4) 08:38:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget(0x0, 0x4000, 0x5a5282321f74239d, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 08:38:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x14f883, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x400, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x8c, 0x2, 0x9, "7d1e245bc738d2da2adb91258f0e5132", "fda1f253b384672c5b4c82a69d61ada588de84021545888058fb8c75e8907e26a1476f617f97b88cb6e9534562a80ba65402e28e56434fab84a1281ecd39d9403a3b8d8a79308f14034504bcb553125000ae8313126beaac186875675bcac9eb932787014b494d0937a6d246da169d68e9b655c9201d3a"}, 0x8c, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x560c, 0x0) sendfile(r4, r0, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:38:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0) 08:38:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x90d, 0x4) 08:38:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x90d, 0x4) 08:38:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget(0x0, 0x4000, 0x5a5282321f74239d, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 08:38:58 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) 08:38:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0) 08:38:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0) 08:38:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget(0x0, 0x4000, 0x5a5282321f74239d, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 08:38:58 executing program 7: msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32) msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) msgget(0x1, 0x84) r0 = msgget(0x3, 0x20) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215) 08:38:58 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) 08:38:58 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) 08:38:58 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'}) ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff) 08:38:58 executing program 7: msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32) msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) msgget(0x1, 0x84) r0 = msgget(0x3, 0x20) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215) 08:38:58 executing program 0: msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32) msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) msgget(0x1, 0x84) r0 = msgget(0x3, 0x20) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215) 08:38:58 executing program 7: msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32) msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) msgget(0x1, 0x84) r0 = msgget(0x3, 0x20) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215) 08:38:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0) 08:38:58 executing program 0: msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32) msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) msgget(0x1, 0x84) r0 = msgget(0x3, 0x20) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215) 08:38:58 executing program 4: msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32) msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) msgget(0x1, 0x84) r0 = msgget(0x3, 0x20) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215) 08:38:58 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) 08:38:58 executing program 0: msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32) msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) msgget(0x1, 0x84) r0 = msgget(0x3, 0x20) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215) 08:38:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000540)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x28}], 0x1}, 0x0) 08:38:59 executing program 4: msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32) msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) msgget(0x1, 0x84) r0 = msgget(0x3, 0x20) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215) 08:38:59 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) 08:38:59 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) 08:38:59 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'}) ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff) 08:38:59 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) 08:38:59 executing program 7: msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32) msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) msgget(0x1, 0x84) r0 = msgget(0x3, 0x20) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215) 08:38:59 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'}) ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff) 08:39:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x1, &(0x7f0000000100)) 08:39:00 executing program 4: msgsnd(0x0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)=""/32) msgsnd(0x0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) msgget(0x1, 0x84) r0 = msgget(0x3, 0x20) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/215) 08:39:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:02 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'}) ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff) 08:39:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0) 08:39:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x2a, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x34000}]}]}, 0x24}], 0x1}, 0x0) 08:39:02 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x88f7, 'i'}}}, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) 08:39:02 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'}) ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff) 08:39:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 08:39:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x2a, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x34000}]}]}, 0x24}], 0x1}, 0x0) 08:39:10 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'}) ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff) 08:39:10 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'}) ioctl$TUNSETGROUP(r0, 0x400454d0, 0xffffffffffffffff) 08:39:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0) 08:39:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 08:39:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x2a, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x34000}]}]}, 0x24}], 0x1}, 0x0) 08:39:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x1, &(0x7f0000000100)) 08:39:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0) 08:39:10 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:39:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 08:39:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x1, &(0x7f0000000100)) 08:39:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x2a, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x34000}]}]}, 0x24}], 0x1}, 0x0) 08:39:10 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:39:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x1, &(0x7f0000000100)) 08:39:10 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:39:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 08:39:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0) 08:39:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x6, "910fea622803"}}) 08:39:10 executing program 5: clock_adjtime(0xa, &(0x7f0000000000)) 08:39:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0) 08:39:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc) pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d) 08:39:11 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:39:11 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00') fchmod(r1, 0x121) getpgid(0xffffffffffffffff) r2 = getpid() ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1) signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00') getpid() 08:39:11 executing program 5: clock_adjtime(0xa, &(0x7f0000000000)) 08:39:11 executing program 1: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 08:39:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x6, "910fea622803"}}) 08:39:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0) 08:39:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc) pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d) 08:39:11 executing program 5: clock_adjtime(0xa, &(0x7f0000000000)) 08:39:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc) pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d) 08:39:11 executing program 5: clock_adjtime(0xa, &(0x7f0000000000)) 08:39:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}]}, 0x1c}}, 0x0) 08:39:12 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00') fchmod(r1, 0x121) getpgid(0xffffffffffffffff) r2 = getpid() ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1) signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00') getpid() 08:39:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x6, "910fea622803"}}) 08:39:12 executing program 1: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 08:39:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc) pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d) 08:39:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}]}, 0x1c}}, 0x0) 08:39:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000340)='smaps\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200810, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0) 08:39:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc) pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d) 08:39:12 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00') fchmod(r1, 0x121) getpgid(0xffffffffffffffff) r2 = getpid() ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1) signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00') getpid() 08:39:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc) pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d) 08:39:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}]}, 0x1c}}, 0x0) 08:39:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x6, "910fea622803"}}) 08:39:12 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00') fchmod(r1, 0x121) getpgid(0xffffffffffffffff) r2 = getpid() ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1) signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00') getpid() 08:39:12 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00') fchmod(r1, 0x121) getpgid(0xffffffffffffffff) r2 = getpid() ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1) signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00') getpid() 08:39:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc) pread64(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x400000000003d) 08:39:12 executing program 1: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 08:39:12 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00') fchmod(r1, 0x121) getpgid(0xffffffffffffffff) r2 = getpid() ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1) signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00') getpid() 08:39:12 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00') fchmod(r1, 0x121) getpgid(0xffffffffffffffff) r2 = getpid() ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1) signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00') getpid() 08:39:12 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40440, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='user.incfs.size\x00') fchmod(r1, 0x121) getpgid(0xffffffffffffffff) r2 = getpid() ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000004c0)=0x1) signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x1, 0x7, 0x81, 0x0, 0x1ff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x44208, 0x3, 0x4b, 0x2, 0x3, 0xffff0001, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r2, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440000000f806", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_procfs(r4, &(0x7f0000000040)='net/rt6_stats\x00') getpid() 08:39:12 executing program 1: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 08:39:12 executing program 3: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) [ 336.713981] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.2:10424] [ 336.714703] Modules linked in: [ 336.715013] irq event stamp: 2437771 [ 336.715351] hardirqs last enabled at (2437770): [] irqentry_exit+0x3b/0x90 [ 336.716145] hardirqs last disabled at (2437771): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 336.719118] softirqs last enabled at (2420224): [] handle_softirqs+0x50c/0x770 [ 336.721242] softirqs last disabled at (2420227): [] irq_exit_rcu+0x94/0xc0 [ 336.721980] CPU: 1 UID: 0 PID: 10424 Comm: syz-executor.2 Not tainted 6.12.0-rc5-next-20241104 #1 [ 336.722745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 336.723449] RIP: 0010:unwind_get_return_address+0x59/0xa0 [ 336.723961] Code: 5d e9 bb 4a 71 03 48 b8 00 00 00 00 00 fc ff df 48 8d 6b 58 48 89 ea 48 c1 ea 03 80 3c 02 00 75 36 48 8b 7b 58 e8 57 64 0d 00 <85> c0 74 cf 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 [ 336.725462] RSP: 0018:ffff88806cf08dc0 EFLAGS: 00000202 [ 336.725947] RAX: 0000000000000001 RBX: ffff88806cf08dd8 RCX: 0000000000000001 [ 336.726562] RDX: 1ffff1100d9e11c6 RSI: ffff88806cf09c88 RDI: ffffffff84597f38 [ 336.727180] RBP: ffff88806cf08e30 R08: 0000000000000001 R09: ffff88806cf08e18 [ 336.727802] R10: 000000000003c001 R11: 00000000000b7a06 R12: ffff88806cf08ea0 [ 336.728421] R13: 0000000000000000 R14: ffff8880137ad280 R15: 0000000000092820 [ 336.729036] FS: 00007ff7c4188700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 336.729745] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.730262] CR2: 0000001b32d29000 CR3: 000000002ced8000 CR4: 0000000000350ef0 [ 336.730882] Call Trace: [ 336.731128] [ 336.731343] ? watchdog_timer_fn+0x3ee/0x510 [ 336.731784] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 336.732247] ? __hrtimer_run_queues+0x57c/0xa70 [ 336.732714] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 336.733183] ? ktime_get_update_offsets_now+0x260/0x3c0 [ 336.733688] ? hrtimer_interrupt+0x2f2/0x750 [ 336.734134] ? __sysvec_apic_timer_interrupt+0xc2/0x330 [ 336.734629] ? sysvec_apic_timer_interrupt+0x34/0x80 [ 336.735105] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.735629] ? ieee80211_rx_list+0x1e38/0x2840 [ 336.736094] ? unwind_get_return_address+0x59/0xa0 [ 336.736552] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 336.737043] arch_stack_walk+0x9d/0xf0 [ 336.737446] ? ieee80211_rx_list+0x1e38/0x2840 [ 336.737901] stack_trace_save+0x8f/0xc0 [ 336.738277] ? __pfx_stack_trace_save+0x10/0x10 [ 336.738713] ? tick_program_event+0xac/0x140 [ 336.739151] ? srso_return_thunk+0x5/0x5f [ 336.739556] ? hrtimer_interrupt+0x589/0x750 [ 336.740000] kasan_save_stack+0x24/0x50 [ 336.740383] ? kasan_save_stack+0x24/0x50 [ 336.740776] ? kasan_save_track+0x14/0x30 [ 336.741170] ? __kasan_slab_alloc+0x59/0x70 [ 336.741578] ? kmem_cache_alloc_noprof+0x13d/0x3d0 [ 336.742061] ? __alloc_object+0x2f/0x270 [ 336.742457] ? __create_object+0x1d/0x80 [ 336.742848] ? __kmalloc_noprof+0x37e/0x4b0 [ 336.743271] ? ieee802_11_parse_elems_full+0xec/0x15a0 [ 336.743782] ? ieee80211_inform_bss+0xf7/0x10b0 [ 336.744235] ? cfg80211_inform_single_bss_data+0x7fe/0x1c50 [ 336.744758] ? cfg80211_inform_bss_data+0x20f/0x3510 [ 336.745230] ? cfg80211_inform_bss_frame_data+0x250/0x690 [ 336.745738] ? ieee80211_bss_info_update+0x2f6/0xa90 [ 336.746218] ? ieee80211_scan_rx+0x474/0xac0 [ 336.746650] ? srso_return_thunk+0x5/0x5f [ 336.747055] ? lockdep_hardirqs_on_prepare+0x12b/0x3f0 [ 336.747558] ? srso_return_thunk+0x5/0x5f [ 336.747993] ? ___slab_alloc+0x4f1/0x1200 [ 336.748397] ? ___slab_alloc+0x2ff/0x1200 [ 336.748810] ? __alloc_object+0x2f/0x270 [ 336.749225] kasan_save_track+0x14/0x30 [ 336.749605] __kasan_slab_alloc+0x59/0x70 [ 336.750009] kmem_cache_alloc_noprof+0x13d/0x3d0 [ 336.750467] ? srso_return_thunk+0x5/0x5f [ 336.750875] ? ieee802_11_parse_elems_full+0xa0/0x15a0 [ 336.751384] ? ieee802_11_parse_elems_full+0xec/0x15a0 [ 336.751896] __alloc_object+0x2f/0x270 [ 336.752282] __create_object+0x1d/0x80 [ 336.752669] ? ieee802_11_parse_elems_full+0xec/0x15a0 [ 336.753165] __kmalloc_noprof+0x37e/0x4b0 [ 336.753573] ? srso_return_thunk+0x5/0x5f [ 336.753980] ? ktime_get+0x171/0x270 [ 336.754359] ? __pfx_mark_lock+0x10/0x10 [ 336.754770] ieee802_11_parse_elems_full+0xec/0x15a0 [ 336.755260] ? srso_return_thunk+0x5/0x5f [ 336.755680] ? srso_return_thunk+0x5/0x5f [ 336.756083] ? hrtimer_interrupt+0x589/0x750 [ 336.756522] ? srso_return_thunk+0x5/0x5f [ 336.756928] ? mark_held_locks+0x9e/0xe0 [ 336.757335] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 336.757859] ? srso_return_thunk+0x5/0x5f [ 336.758262] ? lockdep_hardirqs_on_prepare+0x12b/0x3f0 [ 336.758764] ? srso_return_thunk+0x5/0x5f [ 336.759193] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 336.759688] ieee80211_inform_bss+0xf7/0x10b0 [ 336.760123] ? srso_return_thunk+0x5/0x5f [ 336.760540] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 336.761028] ? lock_acquire+0x32/0xc0 [ 336.761412] ? cfg80211_inform_single_bss_data+0x6c8/0x1c50 [ 336.761945] cfg80211_inform_single_bss_data+0x7fe/0x1c50 [ 336.762457] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 336.762945] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 336.763492] ? __pfx___lock_acquire+0x10/0x10 [ 336.763981] ? __pfx_mark_lock+0x10/0x10 [ 336.764382] ? __pfx_lock_release+0x10/0x10 [ 336.764811] ? trace_lock_acquire+0x137/0x1b0 [ 336.765257] cfg80211_inform_bss_data+0x20f/0x3510 [ 336.765726] ? srso_return_thunk+0x5/0x5f [ 336.766130] ? srso_return_thunk+0x5/0x5f [ 336.766548] ? __pfx_mark_lock+0x10/0x10 [ 336.766957] ? srso_return_thunk+0x5/0x5f [ 336.767361] ? hlock_class+0x4e/0x130 [ 336.767739] ? srso_return_thunk+0x5/0x5f [ 336.768144] ? mark_lock+0xac/0x1370 [ 336.768521] ? srso_return_thunk+0x5/0x5f [ 336.768926] ? mark_lock+0xac/0x1370 [ 336.769303] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 336.769802] ? __pfx_mark_lock+0x10/0x10 [ 336.770204] ? __pfx_mark_lock+0x10/0x10 [ 336.770606] ? mark_lock+0xac/0x1370 [ 336.770987] ? __pfx___lock_acquire+0x10/0x10 [ 336.771436] ? srso_return_thunk+0x5/0x5f [ 336.771853] ? hlock_class+0x4e/0x130 [ 336.772225] ? srso_return_thunk+0x5/0x5f [ 336.772629] ? __lock_acquire+0xccf/0x4430 [ 336.773085] ? __pfx_mark_lock+0x10/0x10 [ 336.773495] ? srso_return_thunk+0x5/0x5f [ 336.773898] ? find_held_lock+0x2c/0x110 [ 336.774292] ? ieee80211_bss_info_update+0x2b4/0xa90 [ 336.774777] ? srso_return_thunk+0x5/0x5f [ 336.775185] ? lock_release+0x20f/0x6f0 [ 336.775592] cfg80211_inform_bss_frame_data+0x250/0x690 [ 336.776122] ieee80211_bss_info_update+0x2f6/0xa90 [ 336.776599] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 336.777111] ? kcov_remote_start+0x211/0x5b0 [ 336.777546] ? srso_return_thunk+0x5/0x5f [ 336.777968] ? srso_return_thunk+0x5/0x5f [ 336.778372] ? ieee80211_get_channel_khz+0x149/0x1d0 [ 336.778851] ieee80211_scan_rx+0x474/0xac0 [ 336.779266] ? ieee80211_clean_skb+0x18f/0x6f0 [ 336.779725] ieee80211_rx_list+0x1e38/0x2840 [ 336.780177] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 336.780629] ? ieee80211_rx_napi+0x97/0x3b0 [ 336.781074] ? srso_return_thunk+0x5/0x5f [ 336.781474] ? lock_acquire+0x32/0xc0 [ 336.781863] ? ieee80211_rx_napi+0x97/0x3b0 [ 336.782291] ieee80211_rx_napi+0xdc/0x3b0 [ 336.782700] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 336.783165] ? srso_return_thunk+0x5/0x5f [ 336.783570] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 336.784061] ieee80211_handle_queued_frames+0xd9/0x130 [ 336.784565] tasklet_action_common+0x235/0x3b0 [ 336.784996] ? workqueue_softirq_action+0x1a/0x170 [ 336.785479] handle_softirqs+0x1b1/0x770 [ 336.785877] irq_exit_rcu+0x94/0xc0 [ 336.786225] sysvec_apic_timer_interrupt+0x70/0x80 [ 336.786688] [ 336.786910] [ 336.787133] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.787625] RIP: 0010:put_cpu_partial+0x10a/0x1b0 [ 336.788101] Code: 24 28 75 5b 49 c7 44 24 28 00 00 00 00 4c 89 e7 48 8d 35 00 00 00 00 e8 54 9f ab ff 4d 85 ed 74 06 e8 2a 6d d5 ff fb 4d 85 f6 <74> 1c 5b 4c 89 f6 48 89 ef 5d 41 5c 41 5d 41 5e e9 c1 fa ff ff 44 [ 336.789613] RSP: 0018:ffff88802de1f6d0 EFLAGS: 00000246 [ 336.790095] RAX: 000000000023e0a7 RBX: ffffea0000377140 RCX: 1ffffffff0fde6c7 [ 336.790712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81846b56 [ 336.791328] RBP: ffff888008c4f780 R08: 0000000000000001 R09: fffffbfff0fdc5e9 [ 336.791958] R10: ffffffff87ee2f4f R11: 00000000000007e0 R12: ffff88806cf40350 [ 336.792572] R13: 0000000000000200 R14: 0000000000000000 R15: ffff88800ddc55c8 [ 336.793203] ? put_cpu_partial+0x106/0x1b0 [ 336.793632] qlist_free_all+0x50/0x160 [ 336.794010] kasan_quarantine_reduce+0x19f/0x240 [ 336.794459] __kasan_slab_alloc+0x49/0x70 [ 336.794865] kmem_cache_alloc_lru_noprof+0x14c/0x3c0 [ 336.795354] ? proc_alloc_inode+0x27/0x210 [ 336.795786] ? get_pid_task+0xfd/0x250 [ 336.796170] proc_alloc_inode+0x27/0x210 [ 336.796568] ? __pfx_proc_alloc_inode+0x10/0x10 [ 336.797018] alloc_inode+0x63/0x240 [ 336.797379] new_inode+0x1c/0x190 [ 336.797725] proc_pid_make_inode+0x21/0x170 [ 336.798151] proc_pident_instantiate+0x85/0x320 [ 336.798606] proc_pident_lookup+0x211/0x2a0 [ 336.799045] lookup_open.isra.0+0x79a/0x1550 [ 336.799485] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 336.799956] ? srso_return_thunk+0x5/0x5f [ 336.800376] ? path_openat+0x13a4/0x2980 [ 336.800798] ? mnt_get_write_access+0x1ea/0x2d0 [ 336.801253] path_openat+0xc91/0x2980 [ 336.801660] ? __pfx_path_openat+0x10/0x10 [ 336.802084] ? __pfx___lock_acquire+0x10/0x10 [ 336.802523] ? srso_return_thunk+0x5/0x5f [ 336.802929] ? find_held_lock+0x2c/0x110 [ 336.803333] do_filp_open+0x1b8/0x410 [ 336.803731] ? __pfx_do_filp_open+0x10/0x10 [ 336.804156] ? find_held_lock+0x2c/0x110 [ 336.804568] ? __pfx_kfree_link+0x10/0x10 [ 336.804967] ? lock_acquire+0x32/0xc0 [ 336.805357] ? srso_return_thunk+0x5/0x5f [ 336.805770] ? _raw_spin_unlock+0x1e/0x40 [ 336.806162] ? srso_return_thunk+0x5/0x5f [ 336.806568] ? alloc_fd+0x2c0/0x560 [ 336.806955] do_sys_openat2+0x164/0x1d0 [ 336.807350] ? __pfx_do_sys_openat2+0x10/0x10 [ 336.807791] ? ktime_get+0x171/0x270 [ 336.808174] ? srso_return_thunk+0x5/0x5f [ 336.808579] ? srso_return_thunk+0x5/0x5f [ 336.808991] ? clockevents_program_event+0x135/0x360 [ 336.809469] __x64_sys_openat+0x143/0x200 [ 336.809871] ? __pfx___x64_sys_openat+0x10/0x10 [ 336.810339] do_syscall_64+0xbf/0x1d0 [ 336.810726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.811209] RIP: 0033:0x7ff7c6bc5a04 [ 336.811554] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 336.813108] RSP: 002b:00007ff7c4188060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 336.813779] RAX: ffffffffffffffda RBX: 00007ff7c6d25f60 RCX: 00007ff7c6bc5a04 [ 336.814402] RDX: 0000000000000002 RSI: 00007ff7c41880f0 RDI: 00000000ffffff9c [ 336.815030] RBP: 00007ff7c41880f0 R08: 0000000000000000 R09: 00007ff7c4187f70 [ 336.815646] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 336.816274] R13: 00007ffd3ae941bf R14: 00007ff7c4188300 R15: 0000000000022000 [ 336.816923] [ 336.817148] Sending NMI from CPU 1 to CPUs 0: [ 336.817581] NMI backtrace for cpu 0 skipped: idling at default_idle+0x1e/0x30 [ 339.260997] Bluetooth: hci3: command 0x0406 tx timeout [ 339.318884] Bluetooth: hci1: command 0x0406 tx timeout [ 343.351365] Bluetooth: hci7: command 0x0406 tx timeout [ 343.352728] Bluetooth: hci6: command 0x0406 tx timeout [ 343.356203] Bluetooth: hci4: command 0x0406 tx timeout [ 343.357411] Bluetooth: hci5: command 0x0406 tx timeout VM DIAGNOSIS: 08:39:36 Registers: info registers vcpu 0 RAX=00000000001635b7 RBX=0000000000000000 RCX=ffffffff84839b17 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812ae2ca RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6cba R10=ffff88806ce365d3 R11=0000000000000000 R12=ffffffff863f7790 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8483aabe RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f35d24e65e0 CR3=0000000016394000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=d4f51932056e8ef30ef3d5a2604d95f9 XMM02=f8d90105b2f23cfc675f634d8c4ed804 XMM03=b5d303368b896c020b79a9420188fc80 XMM04=202c3072286c6176656d69745f6b636f XMM05=38737336a94a2c636f9da9060bf78af3 XMM06=78307b3d293038303030303030303066 XMM07=25772718bf16628dc8a5e2b80d01129d XMM08=7a4be7d584d79377af3819b8b492d947 XMM09=00000000000000000000000000000000 XMM10=0c0d0e0f08090a0b0405060700010203 XMM11=000000c002344f700000000000ea89c0 XMM12=9e2f3b4f45b07eb27d6e39dd7786bf0c XMM13=df9993920949a200388ac620c86f3a75 XMM14=00c70568a9f3bf3159fa7c3310872d78 XMM15=2bda6385f52518b6e25806111f704799 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8263f685 RDI=ffffffff8866f580 RBP=ffffffff8866f540 RSP=ffff88806cf08610 R8 =0000000000000000 R9 =ffffed1001708046 R10=0000000000000020 R11=7371726974666f73 R12=0000000000000020 R13=ffffffff8866f540 R14=0000000000000010 R15=ffffffff8263f670 RIP=ffffffff8263f6dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff7c4188700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b32d29000 CR3=000000002ced8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000