Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:52418' (ECDSA) to the list of known hosts. 2024/10/17 22:22:19 fuzzer started 2024/10/17 22:22:19 dialing manager at localhost:45639 syzkaller login: [ 55.742408] cgroup: Unknown subsys name 'net' [ 55.828470] cgroup: Unknown subsys name 'cpuset' [ 55.855601] cgroup: Unknown subsys name 'rlimit' 2024/10/17 22:22:40 syscalls: 2217 2024/10/17 22:22:40 code coverage: enabled 2024/10/17 22:22:40 comparison tracing: enabled 2024/10/17 22:22:40 extra coverage: enabled 2024/10/17 22:22:40 setuid sandbox: enabled 2024/10/17 22:22:40 namespace sandbox: enabled 2024/10/17 22:22:40 Android sandbox: enabled 2024/10/17 22:22:40 fault injection: enabled 2024/10/17 22:22:40 leak checking: enabled 2024/10/17 22:22:40 net packet injection: enabled 2024/10/17 22:22:40 net device setup: enabled 2024/10/17 22:22:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/17 22:22:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/17 22:22:40 USB emulation: enabled 2024/10/17 22:22:40 hci packet injection: enabled 2024/10/17 22:22:40 wifi device emulation: enabled 2024/10/17 22:22:40 802.15.4 emulation: enabled 2024/10/17 22:22:40 fetching corpus: 0, signal 0/2000 (executing program) 2024/10/17 22:22:40 fetching corpus: 39, signal 15399/19039 (executing program) 2024/10/17 22:22:40 fetching corpus: 85, signal 28472/33445 (executing program) 2024/10/17 22:22:40 fetching corpus: 135, signal 38429/44519 (executing program) 2024/10/17 22:22:40 fetching corpus: 185, signal 42936/50295 (executing program) 2024/10/17 22:22:41 fetching corpus: 235, signal 47078/55596 (executing program) 2024/10/17 22:22:41 fetching corpus: 285, signal 50381/60078 (executing program) 2024/10/17 22:22:41 fetching corpus: 335, signal 55660/66181 (executing program) 2024/10/17 22:22:41 fetching corpus: 385, signal 59177/70606 (executing program) 2024/10/17 22:22:41 fetching corpus: 435, signal 63436/75603 (executing program) 2024/10/17 22:22:41 fetching corpus: 485, signal 68830/81485 (executing program) 2024/10/17 22:22:41 fetching corpus: 535, signal 71392/84769 (executing program) 2024/10/17 22:22:41 fetching corpus: 585, signal 74480/88440 (executing program) 2024/10/17 22:22:41 fetching corpus: 635, signal 77319/91871 (executing program) 2024/10/17 22:22:42 fetching corpus: 685, signal 78766/94155 (executing program) 2024/10/17 22:22:42 fetching corpus: 735, signal 80197/96319 (executing program) 2024/10/17 22:22:42 fetching corpus: 785, signal 82826/99373 (executing program) 2024/10/17 22:22:42 fetching corpus: 835, signal 86800/103440 (executing program) 2024/10/17 22:22:42 fetching corpus: 885, signal 89941/106811 (executing program) 2024/10/17 22:22:42 fetching corpus: 935, signal 93860/110636 (executing program) 2024/10/17 22:22:42 fetching corpus: 985, signal 95553/112742 (executing program) 2024/10/17 22:22:43 fetching corpus: 1035, signal 96913/114538 (executing program) 2024/10/17 22:22:43 fetching corpus: 1085, signal 98454/116486 (executing program) 2024/10/17 22:22:43 fetching corpus: 1135, signal 99783/118152 (executing program) 2024/10/17 22:22:43 fetching corpus: 1185, signal 101914/120390 (executing program) 2024/10/17 22:22:43 fetching corpus: 1235, signal 103155/121931 (executing program) 2024/10/17 22:22:43 fetching corpus: 1285, signal 104904/123877 (executing program) 2024/10/17 22:22:43 fetching corpus: 1335, signal 106375/125533 (executing program) 2024/10/17 22:22:43 fetching corpus: 1385, signal 107102/126638 (executing program) 2024/10/17 22:22:43 fetching corpus: 1435, signal 108537/128184 (executing program) 2024/10/17 22:22:44 fetching corpus: 1485, signal 109580/129463 (executing program) 2024/10/17 22:22:44 fetching corpus: 1535, signal 110618/130739 (executing program) 2024/10/17 22:22:44 fetching corpus: 1584, signal 111956/132115 (executing program) 2024/10/17 22:22:44 fetching corpus: 1634, signal 112982/133344 (executing program) 2024/10/17 22:22:44 fetching corpus: 1684, signal 114331/134755 (executing program) 2024/10/17 22:22:44 fetching corpus: 1734, signal 115106/135745 (executing program) 2024/10/17 22:22:44 fetching corpus: 1782, signal 116031/136849 (executing program) 2024/10/17 22:22:44 fetching corpus: 1832, signal 117037/137957 (executing program) 2024/10/17 22:22:44 fetching corpus: 1882, signal 117738/138886 (executing program) 2024/10/17 22:22:45 fetching corpus: 1932, signal 118477/139805 (executing program) 2024/10/17 22:22:45 fetching corpus: 1982, signal 119008/140576 (executing program) 2024/10/17 22:22:45 fetching corpus: 2032, signal 119659/141441 (executing program) 2024/10/17 22:22:45 fetching corpus: 2081, signal 120745/142479 (executing program) 2024/10/17 22:22:45 fetching corpus: 2131, signal 121553/143367 (executing program) 2024/10/17 22:22:45 fetching corpus: 2181, signal 122241/144186 (executing program) 2024/10/17 22:22:45 fetching corpus: 2231, signal 123494/145207 (executing program) 2024/10/17 22:22:45 fetching corpus: 2281, signal 124861/146277 (executing program) 2024/10/17 22:22:46 fetching corpus: 2331, signal 125494/146982 (executing program) 2024/10/17 22:22:46 fetching corpus: 2381, signal 126654/147903 (executing program) 2024/10/17 22:22:46 fetching corpus: 2431, signal 127155/148543 (executing program) 2024/10/17 22:22:46 fetching corpus: 2481, signal 127670/149190 (executing program) 2024/10/17 22:22:46 fetching corpus: 2531, signal 128108/149768 (executing program) 2024/10/17 22:22:46 fetching corpus: 2581, signal 128869/150466 (executing program) 2024/10/17 22:22:46 fetching corpus: 2631, signal 129572/151142 (executing program) 2024/10/17 22:22:46 fetching corpus: 2681, signal 130196/151746 (executing program) 2024/10/17 22:22:46 fetching corpus: 2731, signal 130781/152331 (executing program) 2024/10/17 22:22:46 fetching corpus: 2781, signal 131589/152968 (executing program) 2024/10/17 22:22:46 fetching corpus: 2831, signal 132351/153580 (executing program) 2024/10/17 22:22:47 fetching corpus: 2881, signal 133153/154200 (executing program) 2024/10/17 22:22:47 fetching corpus: 2931, signal 133779/154725 (executing program) 2024/10/17 22:22:47 fetching corpus: 2981, signal 134326/155235 (executing program) 2024/10/17 22:22:47 fetching corpus: 3031, signal 134862/155696 (executing program) 2024/10/17 22:22:47 fetching corpus: 3081, signal 135283/156123 (executing program) 2024/10/17 22:22:47 fetching corpus: 3131, signal 135648/156508 (executing program) 2024/10/17 22:22:47 fetching corpus: 3181, signal 136201/156936 (executing program) 2024/10/17 22:22:47 fetching corpus: 3231, signal 136791/157351 (executing program) 2024/10/17 22:22:47 fetching corpus: 3281, signal 137250/157757 (executing program) 2024/10/17 22:22:47 fetching corpus: 3331, signal 137664/158137 (executing program) 2024/10/17 22:22:48 fetching corpus: 3381, signal 138018/158472 (executing program) 2024/10/17 22:22:48 fetching corpus: 3431, signal 138630/158851 (executing program) 2024/10/17 22:22:48 fetching corpus: 3481, signal 139222/159239 (executing program) 2024/10/17 22:22:48 fetching corpus: 3531, signal 139745/159585 (executing program) 2024/10/17 22:22:48 fetching corpus: 3581, signal 140157/159880 (executing program) 2024/10/17 22:22:48 fetching corpus: 3631, signal 140539/160197 (executing program) 2024/10/17 22:22:48 fetching corpus: 3681, signal 141155/160510 (executing program) 2024/10/17 22:22:48 fetching corpus: 3731, signal 141600/160809 (executing program) 2024/10/17 22:22:48 fetching corpus: 3781, signal 142239/161086 (executing program) 2024/10/17 22:22:48 fetching corpus: 3831, signal 142723/161369 (executing program) 2024/10/17 22:22:49 fetching corpus: 3881, signal 143228/161624 (executing program) 2024/10/17 22:22:49 fetching corpus: 3931, signal 143635/161863 (executing program) 2024/10/17 22:22:49 fetching corpus: 3981, signal 144123/162109 (executing program) 2024/10/17 22:22:49 fetching corpus: 4031, signal 144596/162119 (executing program) 2024/10/17 22:22:49 fetching corpus: 4081, signal 144878/162119 (executing program) 2024/10/17 22:22:49 fetching corpus: 4131, signal 145233/162119 (executing program) 2024/10/17 22:22:49 fetching corpus: 4181, signal 145894/162127 (executing program) 2024/10/17 22:22:49 fetching corpus: 4231, signal 146491/162127 (executing program) 2024/10/17 22:22:49 fetching corpus: 4281, signal 146907/162127 (executing program) 2024/10/17 22:22:49 fetching corpus: 4331, signal 147318/162127 (executing program) 2024/10/17 22:22:50 fetching corpus: 4380, signal 147809/162161 (executing program) 2024/10/17 22:22:50 fetching corpus: 4430, signal 148213/162161 (executing program) 2024/10/17 22:22:50 fetching corpus: 4479, signal 148646/162161 (executing program) 2024/10/17 22:22:50 fetching corpus: 4529, signal 149447/162161 (executing program) 2024/10/17 22:22:50 fetching corpus: 4578, signal 149957/162162 (executing program) 2024/10/17 22:22:50 fetching corpus: 4628, signal 150584/162166 (executing program) 2024/10/17 22:22:50 fetching corpus: 4678, signal 150940/162184 (executing program) 2024/10/17 22:22:50 fetching corpus: 4728, signal 151355/162184 (executing program) 2024/10/17 22:22:50 fetching corpus: 4778, signal 151752/162329 (executing program) 2024/10/17 22:22:50 fetching corpus: 4828, signal 152030/162329 (executing program) 2024/10/17 22:22:51 fetching corpus: 4878, signal 152686/162329 (executing program) 2024/10/17 22:22:51 fetching corpus: 4928, signal 153099/162329 (executing program) 2024/10/17 22:22:51 fetching corpus: 4978, signal 153718/162329 (executing program) 2024/10/17 22:22:51 fetching corpus: 5028, signal 154065/162329 (executing program) 2024/10/17 22:22:51 fetching corpus: 5078, signal 155074/162333 (executing program) 2024/10/17 22:22:51 fetching corpus: 5128, signal 155878/162691 (executing program) 2024/10/17 22:22:51 fetching corpus: 5176, signal 156480/162703 (executing program) 2024/10/17 22:22:51 fetching corpus: 5226, signal 157061/162706 (executing program) 2024/10/17 22:22:51 fetching corpus: 5276, signal 157282/162707 (executing program) 2024/10/17 22:22:51 fetching corpus: 5326, signal 157913/162707 (executing program) 2024/10/17 22:22:52 fetching corpus: 5376, signal 158121/162707 (executing program) 2024/10/17 22:22:52 fetching corpus: 5426, signal 158364/162714 (executing program) 2024/10/17 22:22:52 fetching corpus: 5476, signal 158757/162714 (executing program) 2024/10/17 22:22:52 fetching corpus: 5526, signal 159163/162714 (executing program) 2024/10/17 22:22:52 fetching corpus: 5576, signal 159510/162720 (executing program) 2024/10/17 22:22:52 fetching corpus: 5626, signal 159919/162720 (executing program) 2024/10/17 22:22:52 fetching corpus: 5676, signal 160250/162720 (executing program) 2024/10/17 22:22:52 fetching corpus: 5726, signal 160552/162725 (executing program) 2024/10/17 22:22:52 fetching corpus: 5776, signal 160913/162725 (executing program) 2024/10/17 22:22:52 fetching corpus: 5815, signal 161100/162725 (executing program) 2024/10/17 22:22:52 fetching corpus: 5815, signal 161100/162725 (executing program) 2024/10/17 22:22:55 starting 8 fuzzer processes 22:22:55 executing program 0: setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x2, &(0x7f0000000080)) 22:22:55 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x200000, 0x0, 0x2}, 0x18) 22:22:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_dump={0xb}}) 22:22:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001740)='?', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002200)='r', 0x1}], 0x1}}], 0x2, 0x0) close(r0) [ 90.171805] audit: type=1400 audit(1729203775.619:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:22:55 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x11, 0x0, 0x0) 22:22:55 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=""/205, 0xcd) 22:22:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x6f52, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0xd02) 22:22:55 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x2088024, &(0x7f0000000600)={[{@sb}]}) [ 91.544862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.557418] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.567371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.572979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.577700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.581197] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.583296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.587918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.590578] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.592661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.595135] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.599358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.626699] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.631240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.641024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.651097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.652964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.654475] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.656979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.659052] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.660332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.663520] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.665862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.670907] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.676335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.684852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.705564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.709207] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.710301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.713144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.715007] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.716585] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.718186] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.723546] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.726113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.729507] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.731229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.731481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.735621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.746886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.757253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.758904] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.761274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.780438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.783248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.814413] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.819961] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.822249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.674143] Bluetooth: hci0: command tx timeout [ 93.674857] Bluetooth: hci1: command tx timeout [ 93.737819] Bluetooth: hci2: command tx timeout [ 93.801961] Bluetooth: hci3: command tx timeout [ 93.802582] Bluetooth: hci5: command tx timeout [ 93.803187] Bluetooth: hci7: command tx timeout [ 93.803715] Bluetooth: hci4: command tx timeout [ 93.866216] Bluetooth: hci6: command tx timeout [ 95.721914] Bluetooth: hci0: command tx timeout [ 95.721977] Bluetooth: hci1: command tx timeout [ 95.786675] Bluetooth: hci2: command tx timeout [ 95.850448] Bluetooth: hci3: command tx timeout [ 95.850592] Bluetooth: hci5: command tx timeout [ 95.851495] Bluetooth: hci4: command tx timeout [ 95.851805] Bluetooth: hci7: command tx timeout [ 95.915011] Bluetooth: hci6: command tx timeout [ 97.769878] Bluetooth: hci1: command tx timeout [ 97.771294] Bluetooth: hci0: command tx timeout [ 97.833830] Bluetooth: hci2: command tx timeout [ 97.897985] Bluetooth: hci7: command tx timeout [ 97.898476] Bluetooth: hci4: command tx timeout [ 97.898975] Bluetooth: hci5: command tx timeout [ 97.899433] Bluetooth: hci3: command tx timeout [ 97.961789] Bluetooth: hci6: command tx timeout [ 99.818068] Bluetooth: hci0: command tx timeout [ 99.819198] Bluetooth: hci1: command tx timeout [ 99.881907] Bluetooth: hci2: command tx timeout [ 99.946040] Bluetooth: hci3: command tx timeout [ 99.946996] Bluetooth: hci5: command tx timeout [ 99.948613] Bluetooth: hci4: command tx timeout [ 99.948633] Bluetooth: hci7: command tx timeout [ 100.010622] Bluetooth: hci6: command tx timeout [ 149.997973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.999020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.360394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.361137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.910581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.913109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.918162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.937202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.946444] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.949001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.966468] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.968209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.969618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.981125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.982952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.984357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.038312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.050082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.057606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.065270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.074377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.085551] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.086535] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.088513] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.091004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.097583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.104003] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.106048] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.170520] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.191919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.193068] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.214248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.217610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.221887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.229059] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.231085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.236246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.237678] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.239322] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.243501] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.245138] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.251812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.257809] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.259282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.259986] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.263329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.267948] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.285368] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.287904] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.305059] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.315352] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.320023] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.010485] Bluetooth: hci0: command tx timeout [ 156.073819] Bluetooth: hci1: command tx timeout [ 156.137840] Bluetooth: hci3: command tx timeout [ 156.202853] Bluetooth: hci2: command tx timeout [ 156.329866] Bluetooth: hci4: command tx timeout [ 156.330816] Bluetooth: hci7: command tx timeout [ 156.394842] Bluetooth: hci6: command tx timeout [ 156.458969] Bluetooth: hci5: command tx timeout [ 158.058781] Bluetooth: hci0: command tx timeout [ 158.121936] Bluetooth: hci1: command tx timeout [ 158.186032] Bluetooth: hci3: command tx timeout [ 158.251018] Bluetooth: hci2: command tx timeout [ 158.377942] Bluetooth: hci4: command tx timeout [ 158.379024] Bluetooth: hci7: command tx timeout [ 158.442898] Bluetooth: hci6: command tx timeout [ 158.505843] Bluetooth: hci5: command tx timeout [ 160.105908] Bluetooth: hci0: command tx timeout [ 160.169903] Bluetooth: hci1: command tx timeout [ 160.234083] Bluetooth: hci3: command tx timeout [ 160.297837] Bluetooth: hci2: command tx timeout [ 160.425851] Bluetooth: hci4: command tx timeout [ 160.425874] Bluetooth: hci7: command tx timeout [ 160.489930] Bluetooth: hci6: command tx timeout [ 160.553832] Bluetooth: hci5: command tx timeout [ 162.154092] Bluetooth: hci0: command tx timeout [ 162.217780] Bluetooth: hci1: command tx timeout [ 162.283748] Bluetooth: hci3: command tx timeout [ 162.346377] Bluetooth: hci2: command tx timeout [ 162.473777] Bluetooth: hci7: command tx timeout [ 162.474272] Bluetooth: hci4: command tx timeout [ 162.539794] Bluetooth: hci6: command tx timeout [ 162.603149] Bluetooth: hci5: command tx timeout [ 211.291880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.292605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.549776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.550503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.851970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.852618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.138070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.138677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.325881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.326503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.524645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.525348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:24:58 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x11, 0x0, 0x0) 22:24:58 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x11, 0x0, 0x0) [ 212.761607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.762468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:24:58 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x11, 0x0, 0x0) 22:24:58 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r2, 0x29, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000800)={r2, 0x0, 0x49d6}) ftruncate(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pread64(r1, &(0x7f00000012c0)=""/4093, 0xffd, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 213.013981] audit: type=1400 audit(1729203898.461:8): avc: denied { open } for pid=7332 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 213.017836] audit: type=1400 audit(1729203898.461:9): avc: denied { kernel } for pid=7332 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 213.034970] hrtimer: interrupt took 28805 ns 22:24:59 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r2, 0x29, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000800)={r2, 0x0, 0x49d6}) ftruncate(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pread64(r1, &(0x7f00000012c0)=""/4093, 0xffd, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 22:25:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r2, 0x29, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000800)={r2, 0x0, 0x49d6}) ftruncate(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pread64(r1, &(0x7f00000012c0)=""/4093, 0xffd, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 22:25:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r2, 0x29, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000800)={r2, 0x0, 0x49d6}) ftruncate(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pread64(r1, &(0x7f00000012c0)=""/4093, 0xffd, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 22:25:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xfd, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 216.821321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.827130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.834872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.860421] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.876070] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.880294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.887650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.894251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.900519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.913955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.934954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.937011] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.986628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.003223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.007985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.030989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.074670] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.076950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.274129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.285512] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.290132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.302521] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.313798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.319390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.406234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.408976] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.411024] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.414858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.417253] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.419261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.464515] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.467812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.469120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.482243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.488320] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.509540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.514181] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.534040] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.561061] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.588390] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.598198] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.602023] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.922319] Bluetooth: hci0: command tx timeout [ 218.985828] Bluetooth: hci1: command tx timeout [ 219.177777] Bluetooth: hci3: command tx timeout [ 219.434889] Bluetooth: hci4: command tx timeout [ 219.497833] Bluetooth: hci5: command tx timeout [ 219.562860] Bluetooth: hci6: command tx timeout [ 219.754774] Bluetooth: hci7: command tx timeout [ 220.970921] Bluetooth: hci0: command tx timeout [ 221.034736] Bluetooth: hci1: command tx timeout [ 221.226830] Bluetooth: hci3: command tx timeout [ 221.483734] Bluetooth: hci4: command tx timeout [ 221.552494] Bluetooth: hci5: command tx timeout [ 221.610924] Bluetooth: hci6: command tx timeout [ 221.801860] Bluetooth: hci7: command tx timeout [ 223.018776] Bluetooth: hci0: command tx timeout [ 223.081924] Bluetooth: hci1: command tx timeout [ 223.273902] Bluetooth: hci3: command tx timeout [ 223.530970] Bluetooth: hci4: command tx timeout [ 223.594979] Bluetooth: hci5: command tx timeout [ 223.658720] Bluetooth: hci6: command tx timeout [ 223.850876] Bluetooth: hci7: command tx timeout [ 225.066935] Bluetooth: hci0: command tx timeout [ 225.130862] Bluetooth: hci1: command tx timeout [ 225.321745] Bluetooth: hci3: command tx timeout [ 225.578765] Bluetooth: hci4: command tx timeout [ 225.642296] Bluetooth: hci5: command tx timeout [ 225.706820] Bluetooth: hci6: command tx timeout [ 225.897859] Bluetooth: hci7: command tx timeout [ 263.967831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.968500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.140615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.141466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.764100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.764811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.943939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.944595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.090350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.091034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.273772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.274435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.428843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.429479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.624541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.626035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.647423] EXT4-fs: Ignoring sb option on remount [ 265.675342] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: none. [ 265.678996] EXT4-fs: Ignoring sb option on remount [ 265.680031] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: none. [ 265.762438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.763213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.895130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.896434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.103360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.104740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.240076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.240829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.539270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.539980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.594269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.594936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:25:53 executing program 0: setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x2, &(0x7f0000000080)) 22:25:53 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x2088024, &(0x7f0000000600)={[{@sb}]}) 22:25:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xfd, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:25:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x6f52, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0xd02) 22:25:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001740)='?', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002200)='r', 0x1}], 0x1}}], 0x2, 0x0) close(r0) 22:25:53 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=""/205, 0xcd) 22:25:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x6f52, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0xd02) 22:25:53 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x200000, 0x0, 0x2}, 0x18) [ 268.079476] EXT4-fs: Ignoring sb option on remount [ 268.118078] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: none. 22:25:53 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=""/205, 0xcd) 22:25:53 executing program 0: setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x2, &(0x7f0000000080)) 22:25:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x6f52, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0xd02) 22:25:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xfd, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:25:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x6f52, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0xd02) 22:25:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001740)='?', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002200)='r', 0x1}], 0x1}}], 0x2, 0x0) close(r0) 22:25:53 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x200000, 0x0, 0x2}, 0x18) 22:25:53 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x2088024, &(0x7f0000000600)={[{@sb}]}) 22:25:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x6f52, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0xd02) 22:25:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x6f52, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0xd02) [ 268.613334] EXT4-fs: Ignoring sb option on remount [ 268.639717] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: none. 22:25:54 executing program 0: setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x2, &(0x7f0000000080)) 22:25:54 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x200000, 0x0, 0x2}, 0x18) 22:25:54 executing program 6: setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x2, &(0x7f0000000080)) 22:25:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001740)='?', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002200)='r', 0x1}], 0x1}}], 0x2, 0x0) close(r0) 22:25:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x2088024, &(0x7f0000000600)={[{@sb}]}) 22:25:54 executing program 6: setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x2, &(0x7f0000000080)) 22:25:54 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=""/205, 0xcd) 22:25:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xfd, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 269.078327] EXT4-fs: Ignoring sb option on remount [ 269.095866] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: none. 22:25:54 executing program 6: setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x2, &(0x7f0000000080)) 22:25:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x6f52, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0xd02) 22:25:54 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xfd, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:25:54 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x8) 22:25:54 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @broadcast, @local}}}}, 0x0) 22:25:54 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xfd, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:25:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xfd, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:25:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x6f52, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0xd02) 22:25:55 executing program 3: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) openat(r2, 0x0, 0x4000, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001280)) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x2, 0x4, 0xb4, 0x0, 0x54176f4d, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb85, 0xeb76b2d4b41772c0, @perf_config_ext={0xffffffffffffff02, 0xffff}, 0x0, 0x26, 0x800, 0x5, 0x1f, 0x6, 0x8, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r0, 0xb) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x8) 22:25:55 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 22:25:55 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @broadcast, @local}}}}, 0x0) 22:25:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x8) 22:25:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x6f52, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0xd02) 22:25:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private}, 0xc) 22:25:55 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r0, 0x0) 22:25:55 executing program 3: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) openat(r2, 0x0, 0x4000, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001280)) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x2, 0x4, 0xb4, 0x0, 0x54176f4d, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb85, 0xeb76b2d4b41772c0, @perf_config_ext={0xffffffffffffff02, 0xffff}, 0x0, 0x26, 0x800, 0x5, 0x1f, 0x6, 0x8, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r0, 0xb) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:55 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) openat(r2, 0x0, 0x4000, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001280)) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x2, 0x4, 0xb4, 0x0, 0x54176f4d, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb85, 0xeb76b2d4b41772c0, @perf_config_ext={0xffffffffffffff02, 0xffff}, 0x0, 0x26, 0x800, 0x5, 0x1f, 0x6, 0x8, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r0, 0xb) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private}, 0xc) 22:25:55 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @broadcast, @local}}}}, 0x0) 22:25:55 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r0, 0x0) 22:25:55 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 22:25:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x8) 22:25:55 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=@encrypted_new={'new ', 'default', 0x20, 'trusted:'}, 0xffffffffffffff5e, 0xfffffffffffffffd) 22:25:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private}, 0xc) 22:25:56 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @broadcast, @local}}}}, 0x0) 22:25:56 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r0, 0x0) 22:25:56 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=@encrypted_new={'new ', 'default', 0x20, 'trusted:'}, 0xffffffffffffff5e, 0xfffffffffffffffd) 22:25:56 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 22:25:56 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r0, 0x0) 22:25:56 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 22:25:56 executing program 0: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:56 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=@encrypted_new={'new ', 'default', 0x20, 'trusted:'}, 0xffffffffffffff5e, 0xfffffffffffffffd) 22:25:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private}, 0xc) 22:25:56 executing program 3: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) openat(r2, 0x0, 0x4000, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001280)) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x2, 0x4, 0xb4, 0x0, 0x54176f4d, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb85, 0xeb76b2d4b41772c0, @perf_config_ext={0xffffffffffffff02, 0xffff}, 0x0, 0x26, 0x800, 0x5, 0x1f, 0x6, 0x8, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r0, 0xb) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:56 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) openat(r2, 0x0, 0x4000, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001280)) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x2, 0x4, 0xb4, 0x0, 0x54176f4d, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb85, 0xeb76b2d4b41772c0, @perf_config_ext={0xffffffffffffff02, 0xffff}, 0x0, 0x26, 0x800, 0x5, 0x1f, 0x6, 0x8, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r0, 0xb) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x100000001) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[], 0x6) 22:25:56 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=@encrypted_new={'new ', 'default', 0x20, 'trusted:'}, 0xffffffffffffff5e, 0xfffffffffffffffd) 22:25:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:25:56 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0x7}, {0x3, 0x5}]}, 0x18, 0x0) 22:25:56 executing program 0: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x100000001) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[], 0x6) 22:25:56 executing program 6: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:57 executing program 2: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:57 executing program 4: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:57 executing program 0: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x100000001) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[], 0x6) 22:25:57 executing program 6: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x100000001) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[], 0x6) 22:25:57 executing program 4: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:58 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) openat(r2, 0x0, 0x4000, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001280)) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x2, 0x4, 0xb4, 0x0, 0x54176f4d, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb85, 0xeb76b2d4b41772c0, @perf_config_ext={0xffffffffffffff02, 0xffff}, 0x0, 0x26, 0x800, 0x5, 0x1f, 0x6, 0x8, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r0, 0xb) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:25:58 executing program 4: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:58 executing program 0: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:58 executing program 6: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:58 executing program 2: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:58 executing program 1: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:58 executing program 3: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) openat(r2, 0x0, 0x4000, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001280)) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x2, 0x4, 0xb4, 0x0, 0x54176f4d, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb85, 0xeb76b2d4b41772c0, @perf_config_ext={0xffffffffffffff02, 0xffff}, 0x0, 0x26, 0x800, 0x5, 0x1f, 0x6, 0x8, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r0, 0xb) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:58 executing program 1: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:59 executing program 5: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:59 executing program 0: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:59 executing program 2: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:59 executing program 4: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:25:59 executing program 1: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 22:25:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x400, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="85ad1ab2fc10c2c865735b34a17c9095", 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x10001, 0x80000001) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)={0x77359400}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/69, 0x45}, {&(0x7f0000000380)=""/103, 0x67}], 0x3}, 0x40001141) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0xa00) 22:25:59 executing program 4: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:59 executing program 0: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:59 executing program 5: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:25:59 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}}, 0x0) 22:25:59 executing program 1: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000400)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 22:26:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 22:26:00 executing program 4: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:26:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:26:00 executing program 0: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:26:00 executing program 5: unshare(0x2010400) unshare(0x50b00) unshare(0x8000000) unshare(0x300) unshare(0x10040000) unshare(0x7010900) unshare(0x24060000) unshare(0x2060180) unshare(0x100) unshare(0xa80) unshare(0x38000100) unshare(0x24000400) unshare(0x0) unshare(0x40800) unshare(0x100) unshare(0x50000) unshare(0x4030600) 22:26:00 executing program 4: renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xb) 22:26:00 executing program 4: renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xb) 22:26:01 executing program 4: renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xb) 22:26:01 executing program 4: renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xb) [ 276.102075] Process accounting resumed 22:26:01 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 22:26:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x400, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="85ad1ab2fc10c2c865735b34a17c9095", 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x10001, 0x80000001) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)={0x77359400}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/69, 0x45}, {&(0x7f0000000380)=""/103, 0x67}], 0x3}, 0x40001141) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0xa00) 22:26:01 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1) 22:26:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x2, 0x3}) setresuid(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) 22:26:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) [ 278.122733] Bluetooth: hci2: command 0x0406 tx timeout [ 279.160296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.164526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.167012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.195452] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.201118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.204558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.257905] Bluetooth: hci4: command tx timeout [ 283.307005] Bluetooth: hci4: command tx timeout [ 285.353929] Bluetooth: hci4: command tx timeout [ 287.401801] Bluetooth: hci4: command tx timeout [ 307.067375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.068607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.146731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.147925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.329425] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.332915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.335197] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.342023] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.346140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 310.348651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.425865] Bluetooth: hci4: command tx timeout [ 314.473908] Bluetooth: hci4: command tx timeout [ 316.522391] Bluetooth: hci4: command tx timeout [ 318.569933] Bluetooth: hci4: command tx timeout [ 338.558086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.559442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.627441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.628774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:27:04 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 22:27:04 executing program 1: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000400)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 22:27:04 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 22:27:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}}, 0x0) 22:27:04 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1) 22:27:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 22:27:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x2, 0x3}) setresuid(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) 22:27:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x400, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="85ad1ab2fc10c2c865735b34a17c9095", 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x10001, 0x80000001) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)={0x77359400}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/69, 0x45}, {&(0x7f0000000380)=""/103, 0x67}], 0x3}, 0x40001141) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0xa00) [ 339.321261] Bluetooth: hci1: command 0x0406 tx timeout [ 339.322278] Bluetooth: hci0: command 0x0406 tx timeout [ 339.322742] Bluetooth: hci3: command 0x0406 tx timeout [ 339.401393] Process accounting resumed 22:27:04 executing program 1: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000400)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 22:27:05 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 22:27:05 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 22:27:05 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1) [ 339.805945] Process accounting resumed 22:27:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}}, 0x0) 22:27:05 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 22:27:05 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000400)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 22:27:05 executing program 1: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000400)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 22:27:05 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1) 22:27:05 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 22:27:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x400, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="85ad1ab2fc10c2c865735b34a17c9095", 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x10001, 0x80000001) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)={0x77359400}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/69, 0x45}, {&(0x7f0000000380)=""/103, 0x67}], 0x3}, 0x40001141) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0xa00) 22:27:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x2, 0x3}) setresuid(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 340.342124] Process accounting resumed [ 340.362589] Process accounting resumed 22:27:05 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000400)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 22:27:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x2, 0x3}) setresuid(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) 22:27:06 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}}, 0x0) [ 340.652402] Process accounting resumed 22:27:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:27:06 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000400)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 22:27:06 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000400)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 22:27:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 22:27:06 executing program 7: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:06 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000280)) [ 340.906777] Process accounting resumed 22:27:06 executing program 1: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x45b0, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x0, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c75d8a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 22:27:06 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$P9_RLINK(r1, &(0x7f0000000440)={0x7}, 0x7) 22:27:06 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000400)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 341.071304] Process accounting resumed 22:27:06 executing program 7: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 341.113757] Process accounting resumed 22:27:06 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000280)) 22:27:06 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000400)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 22:27:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 22:27:06 executing program 1: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x45b0, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x0, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c75d8a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 22:27:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 341.542835] Process accounting resumed 22:27:07 executing program 7: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 22:27:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000280)=0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f0000000400)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 22:27:07 executing program 1: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x45b0, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x0, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c75d8a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 22:27:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 22:27:07 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$P9_RLINK(r1, &(0x7f0000000440)={0x7}, 0x7) 22:27:07 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000280)) 22:27:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:27:07 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000280)) 22:27:07 executing program 7: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:07 executing program 1: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x45b0, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x0, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c75d8a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 22:27:07 executing program 6: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$P9_RLINK(r1, &(0x7f0000000440)={0x7}, 0x7) 22:27:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 22:27:08 executing program 1: ioperm(0x0, 0x6d1f, 0x8) getgid() quotactl(0x0, 0x0, 0xee01, 0x0) fstat(0xffffffffffffffff, 0x0) 22:27:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 22:27:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:27:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000280)=0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f0000000400)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 22:27:08 executing program 6: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$P9_RLINK(r1, &(0x7f0000000440)={0x7}, 0x7) 22:27:08 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$P9_RLINK(r1, &(0x7f0000000440)={0x7}, 0x7) [ 343.404162] Bluetooth: hci5: command 0x0406 tx timeout [ 343.404248] Bluetooth: hci6: command 0x0406 tx timeout [ 343.405199] Bluetooth: hci7: command 0x0406 tx timeout 22:27:08 executing program 1: ioperm(0x0, 0x6d1f, 0x8) getgid() quotactl(0x0, 0x0, 0xee01, 0x0) fstat(0xffffffffffffffff, 0x0) 22:27:08 executing program 1: ioperm(0x0, 0x6d1f, 0x8) getgid() quotactl(0x0, 0x0, 0xee01, 0x0) fstat(0xffffffffffffffff, 0x0) 22:27:09 executing program 1: ioperm(0x0, 0x6d1f, 0x8) getgid() quotactl(0x0, 0x0, 0xee01, 0x0) fstat(0xffffffffffffffff, 0x0) 22:27:09 executing program 7: ioperm(0x0, 0x6d1f, 0x8) getgid() quotactl(0x0, 0x0, 0xee01, 0x0) fstat(0xffffffffffffffff, 0x0) 22:27:09 executing program 5: ioperm(0x0, 0x6d1f, 0x8) getgid() quotactl(0x0, 0x0, 0xee01, 0x0) fstat(0xffffffffffffffff, 0x0) 22:27:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000280)=0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f0000000400)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 22:27:09 executing program 7: ioperm(0x0, 0x6d1f, 0x8) getgid() quotactl(0x0, 0x0, 0xee01, 0x0) fstat(0xffffffffffffffff, 0x0) 22:27:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:27:09 executing program 5: ioperm(0x0, 0x6d1f, 0x8) getgid() quotactl(0x0, 0x0, 0xee01, 0x0) fstat(0xffffffffffffffff, 0x0) 22:27:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000280)=0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f0000000400)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 22:27:19 executing program 7: ioperm(0x0, 0x6d1f, 0x8) getgid() quotactl(0x0, 0x0, 0xee01, 0x0) fstat(0xffffffffffffffff, 0x0) 22:27:19 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4, 0xffffffffffffffff) 22:27:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @random="40e23b874f80"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @void}}]]}, 0x50}}, 0x0) 22:27:19 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$P9_RLINK(r1, &(0x7f0000000440)={0x7}, 0x7) 22:27:19 executing program 5: ioperm(0x0, 0x6d1f, 0x8) getgid() quotactl(0x0, 0x0, 0xee01, 0x0) fstat(0xffffffffffffffff, 0x0) 22:27:19 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980), 0x8, 0x0) readv(r0, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/104, 0x68}], 0x1) 22:27:19 executing program 6: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$P9_RLINK(r1, &(0x7f0000000440)={0x7}, 0x7) 22:27:19 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4, 0xffffffffffffffff) 22:27:19 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980), 0x8, 0x0) readv(r0, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/104, 0x68}], 0x1) 22:27:19 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4, 0xffffffffffffffff) 22:27:19 executing program 7: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x5, &(0x7f00000002c0), 0x0) 22:27:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f00000002c0)) 22:27:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 22:27:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @random="40e23b874f80"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @void}}]]}, 0x50}}, 0x0) 22:27:19 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980), 0x8, 0x0) readv(r0, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/104, 0x68}], 0x1) 22:27:19 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4, 0xffffffffffffffff) 22:27:19 executing program 7: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x5, &(0x7f00000002c0), 0x0) 22:27:19 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980), 0x8, 0x0) readv(r0, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/104, 0x68}], 0x1) 22:27:19 executing program 7: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x5, &(0x7f00000002c0), 0x0) 22:27:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 22:27:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f00000002c0)) 22:27:20 executing program 1: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x5, &(0x7f00000002c0), 0x0) 22:27:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @random="40e23b874f80"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @void}}]]}, 0x50}}, 0x0) 22:27:20 executing program 7: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x5, &(0x7f00000002c0), 0x0) 22:27:20 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 22:27:20 executing program 6: getcwd(0x0, 0x0) 22:27:20 executing program 2: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x20040, 0x246020420ae14755}, 0x18) 22:27:20 executing program 1: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x5, &(0x7f00000002c0), 0x0) 22:27:20 executing program 6: getcwd(0x0, 0x0) 22:27:20 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 22:27:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 22:27:20 executing program 6: getcwd(0x0, 0x0) 22:27:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @random="40e23b874f80"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @void}}]]}, 0x50}}, 0x0) 22:27:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f00000002c0)) 22:27:20 executing program 1: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x5, &(0x7f00000002c0), 0x0) 22:27:20 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 22:27:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 22:27:20 executing program 2: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x20040, 0x246020420ae14755}, 0x18) [ 355.244168] loop7: detected capacity change from 0 to 40 22:27:20 executing program 6: getcwd(0x0, 0x0) 22:27:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f00000002c0)) 22:27:20 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 22:27:20 executing program 2: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x20040, 0x246020420ae14755}, 0x18) 22:27:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000040)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000740)=@chain={'key_or_keyring:', r0}) 22:27:20 executing program 4: iopl(0x3) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:27:21 executing program 2: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x20040, 0x246020420ae14755}, 0x18) [ 356.149365] syz-executor.7 (11979) used greatest stack depth: 23384 bytes left 22:27:21 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) 22:27:21 executing program 0: r0 = syz_io_uring_setup(0x4c8f, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1) 22:27:21 executing program 3: clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) 22:27:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x204300, 0x0) close(r0) 22:27:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000040)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000740)=@chain={'key_or_keyring:', r0}) 22:27:21 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0x80000002) 22:27:21 executing program 4: iopl(0x3) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:27:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x204300, 0x0) close(r0) 22:27:21 executing program 0: r0 = syz_io_uring_setup(0x4c8f, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1) 22:27:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x204300, 0x0) close(r0) 22:27:21 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) 22:27:21 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0x80000002) [ 356.545132] loop7: detected capacity change from 0 to 40 22:27:22 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000040)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000740)=@chain={'key_or_keyring:', r0}) 22:27:22 executing program 4: iopl(0x3) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:27:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x204300, 0x0) close(r0) 22:27:22 executing program 0: r0 = syz_io_uring_setup(0x4c8f, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1) 22:27:22 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) [ 356.798009] syz-executor.7: attempt to access beyond end of device [ 356.798009] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 356.799337] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 357.022459] loop7: detected capacity change from 0 to 40 22:27:22 executing program 4: iopl(0x3) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:27:22 executing program 3: clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) 22:27:22 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000040)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000740)=@chain={'key_or_keyring:', r0}) 22:27:22 executing program 0: r0 = syz_io_uring_setup(0x4c8f, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1) 22:27:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:22 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0x80000002) 22:27:22 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) 22:27:22 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0x80000002) 22:27:22 executing program 5: clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) [ 357.238161] syz-executor.7: attempt to access beyond end of device [ 357.238161] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 357.239540] Buffer I/O error on dev loop7, logical block 10, lost async page write 22:27:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:22 executing program 3: clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) 22:27:22 executing program 6: r0 = syz_io_uring_setup(0x4c8f, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1) 22:27:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:22 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000001f41660069006c00650030000f00fc00000000ffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) 22:27:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000500)={0x20, 0x10, 0x321, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x20}], 0x1}, 0x0) 22:27:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f80100200040000000000000000000800029c76292f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100098ea70325132510000ea7032510300000000002e2e202020202020202020100098ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200098ea70325132510000ea70325104001a040000", 0x80, 0x10e00}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x20e00}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x30e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50e00}], 0x0, &(0x7f0000010d00)) [ 357.394370] loop7: detected capacity change from 0 to 40 [ 357.422373] loop1: detected capacity change from 0 to 40 [ 357.475057] syz-executor.1: attempt to access beyond end of device [ 357.475057] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 357.476586] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 357.498245] loop0: detected capacity change from 0 to 1294 [ 357.538467] loop2: detected capacity change from 0 to 10 [ 357.539929] syz-executor.7: attempt to access beyond end of device [ 357.539929] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 357.541148] Buffer I/O error on dev loop7, logical block 10, lost async page write 22:27:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:23 executing program 5: clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) 22:27:23 executing program 6: r0 = syz_io_uring_setup(0x4c8f, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1) 22:27:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000001f41660069006c00650030000f00fc00000000ffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) 22:27:23 executing program 0: setreuid(0x0, 0xee01) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24960, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:27:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000500)={0x20, 0x10, 0x321, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x20}], 0x1}, 0x0) 22:27:23 executing program 3: clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) [ 357.772138] loop2: detected capacity change from 0 to 10 [ 357.772806] loop1: detected capacity change from 0 to 40 [ 357.852742] syz-executor.1: attempt to access beyond end of device [ 357.852742] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 357.853944] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:27:23 executing program 0: setreuid(0x0, 0xee01) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24960, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:27:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000500)={0x20, 0x10, 0x321, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x20}], 0x1}, 0x0) 22:27:23 executing program 6: r0 = syz_io_uring_setup(0x4c8f, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1) 22:27:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000001f41660069006c00650030000f00fc00000000ffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) 22:27:23 executing program 5: clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) 22:27:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 358.038366] loop2: detected capacity change from 0 to 10 22:27:23 executing program 0: setreuid(0x0, 0xee01) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24960, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:27:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000500)={0x20, 0x10, 0x321, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x20}], 0x1}, 0x0) 22:27:23 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000001f41660069006c00650030000f00fc00000000ffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) 22:27:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f0000000100), 0x0) [ 358.117028] loop1: detected capacity change from 0 to 40 22:27:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000001f41660069006c00650030000f00fc00000000ffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) [ 358.162544] loop7: detected capacity change from 0 to 10 [ 358.200112] syz-executor.1: attempt to access beyond end of device [ 358.200112] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 358.201218] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:27:23 executing program 0: setreuid(0x0, 0xee01) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24960, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 358.271536] loop2: detected capacity change from 0 to 10 22:27:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f0000000100), 0x0) 22:27:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f0000000100), 0x0) 22:27:23 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000001f41660069006c00650030000f00fc00000000ffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) 22:27:23 executing program 6: syz_emit_ethernet(0x2b, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x11, 0x0, 0x0, @empty, 'x'}}}}}, 0x0) [ 358.454302] loop7: detected capacity change from 0 to 10 22:27:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_aout(r2, &(0x7f0000000040), 0x20) splice(r1, 0x0, r0, 0x0, 0x140, 0x0) 22:27:23 executing program 6: syz_emit_ethernet(0x2b, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x11, 0x0, 0x0, @empty, 'x'}}}}}, 0x0) 22:27:23 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000001f41660069006c00650030000f00fc00000000ffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) 22:27:23 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r1 = fcntl$dupfd(r0, 0x0, r0) setns(r1, 0x0) 22:27:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="80f1", 0x2}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001b00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14}}], 0x38}}], 0x2, 0x0) 22:27:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f0000000100), 0x0) 22:27:24 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [ 358.608633] loop7: detected capacity change from 0 to 10 22:27:24 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r1 = fcntl$dupfd(r0, 0x0, r0) setns(r1, 0x0) 22:27:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_aout(r2, &(0x7f0000000040), 0x20) splice(r1, 0x0, r0, 0x0, 0x140, 0x0) 22:27:24 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r1 = fcntl$dupfd(r0, 0x0, r0) setns(r1, 0x0) 22:27:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="80f1", 0x2}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001b00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14}}], 0x38}}], 0x2, 0x0) 22:27:24 executing program 6: syz_emit_ethernet(0x2b, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x11, 0x0, 0x0, @empty, 'x'}}}}}, 0x0) 22:27:24 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 22:27:24 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r1 = fcntl$dupfd(r0, 0x0, r0) setns(r1, 0x0) 22:27:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_aout(r2, &(0x7f0000000040), 0x20) splice(r1, 0x0, r0, 0x0, 0x140, 0x0) 22:27:24 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 22:27:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="80f1", 0x2}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001b00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14}}], 0x38}}], 0x2, 0x0) 22:27:24 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 22:27:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="80f1", 0x2}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001b00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14}}], 0x38}}], 0x2, 0x0) 22:27:24 executing program 6: syz_emit_ethernet(0x2b, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x11, 0x0, 0x0, @empty, 'x'}}}}}, 0x0) 22:27:24 executing program 3: readlink(0x0, &(0x7f0000000180)=""/162, 0xa2) 22:27:24 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 22:27:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_aout(r2, &(0x7f0000000040), 0x20) splice(r1, 0x0, r0, 0x0, 0x140, 0x0) 22:27:24 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 22:27:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "12ea2907325ee924e0cbbc0700"}) 22:27:24 executing program 3: readlink(0x0, &(0x7f0000000180)=""/162, 0xa2) 22:27:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="80f1", 0x2}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001b00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14}}], 0x38}}], 0x2, 0x0) 22:27:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="80f1", 0x2}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001b00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14}}], 0x38}}], 0x2, 0x0) 22:27:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 22:27:24 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 22:27:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "12ea2907325ee924e0cbbc0700"}) 22:27:24 executing program 3: readlink(0x0, &(0x7f0000000180)=""/162, 0xa2) 22:27:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "12ea2907325ee924e0cbbc0700"}) 22:27:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="80f1", 0x2}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001b00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14}}], 0x38}}], 0x2, 0x0) 22:27:25 executing program 5: setfsgid(0xee00) setresgid(0x0, 0x0, 0x0) 22:27:25 executing program 3: readlink(0x0, &(0x7f0000000180)=""/162, 0xa2) 22:27:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 22:27:25 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7ff, 0x1ff, 0x6, 0x7, 0x90cc, 0x8}, {0xfb, 0x7ff, 0x1, 0x0, 0x657856c6, 0x7}], ['\x00']}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080)="ee35", 0x2, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8001) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) dup(0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r2, 0x29, 0x31, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x40510, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:25 executing program 1: msync(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x5) 22:27:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "12ea2907325ee924e0cbbc0700"}) 22:27:25 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 22:27:25 executing program 5: setfsgid(0xee00) setresgid(0x0, 0x0, 0x0) 22:27:25 executing program 3: setfsgid(0xee00) setresgid(0x0, 0x0, 0x0) 22:27:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 22:27:25 executing program 1: msync(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x5) 22:27:25 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 22:27:25 executing program 5: setfsgid(0xee00) setresgid(0x0, 0x0, 0x0) 22:27:25 executing program 7: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 22:27:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 22:27:25 executing program 7: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 22:27:25 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 22:27:25 executing program 1: msync(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x5) 22:27:25 executing program 3: setfsgid(0xee00) setresgid(0x0, 0x0, 0x0) [ 396.757014] watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.0:12180] [ 396.757669] Modules linked in: [ 396.757998] irq event stamp: 3467125 [ 396.758361] hardirqs last enabled at (3467124): [] irqentry_exit+0x3b/0x90 [ 396.759234] hardirqs last disabled at (3467125): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 396.760590] softirqs last enabled at (3441788): [] handle_softirqs+0x50c/0x770 [ 396.761978] softirqs last disabled at (3441791): [] irq_exit_rcu+0x94/0xc0 [ 396.763218] CPU: 0 UID: 0 PID: 12180 Comm: syz-executor.0 Not tainted 6.12.0-rc3-next-20241016 #1 [ 396.764590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 396.765863] RIP: 0010:kernel_text_address+0x1f/0xc0 [ 396.766647] Code: 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 48 89 fd 48 83 ec 08 e8 3f ff ff ff 85 c0 74 0f b8 01 00 00 00 48 83 c4 08 5d 7c 87 62 03 e8 77 25 17 00 84 c0 74 33 48 89 ef e8 3b f5 1b 00 [ 396.769531] RSP: 0018:ffff88806ce09668 EFLAGS: 00000296 [ 396.770339] RAX: 0000000000000001 RBX: ffffffff8338b5d5 RCX: 0000000000000001 [ 396.771399] RDX: 1ffff1100d9c12de RSI: ffff88806ce09de8 RDI: ffffffff8338b5d5 [ 396.772452] RBP: ffff88806ce096f0 R08: 0000000000000001 R09: ffff88806ce096d8 [ 396.773686] R10: 000000000003c001 R11: 00000000000b96bc R12: ffff88806ce09760 [ 396.774365] R13: 0000000000000000 R14: ffff88803f219b80 R15: 0000000000082820 [ 396.775063] FS: 00007f7abdc02700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 396.775839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.776406] CR2: 000055557e464c58 CR3: 0000000040190000 CR4: 0000000000350ef0 [ 396.777086] Call Trace: [ 396.777350] [ 396.777583] ? watchdog_timer_fn+0x3ee/0x510 [ 396.778049] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 396.778557] ? __hrtimer_run_queues+0x57c/0xa70 [ 396.779061] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 396.779565] ? ktime_get_update_offsets_now+0x260/0x3c0 [ 396.780135] ? hrtimer_interrupt+0x2f2/0x750 [ 396.780616] ? __sysvec_apic_timer_interrupt+0xc2/0x390 [ 396.781153] ? sysvec_apic_timer_interrupt+0x34/0x80 [ 396.781680] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.782246] ? mac80211_hwsim_beacon+0x105/0x200 [ 396.782768] ? mac80211_hwsim_beacon+0x105/0x200 [ 396.783264] ? kernel_text_address+0x1f/0xc0 [ 396.783726] __kernel_text_address+0xd/0x40 [ 396.784177] unwind_get_return_address+0x59/0xa0 [ 396.784666] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 396.785226] arch_stack_walk+0x9d/0xf0 [ 396.785669] ? mac80211_hwsim_beacon+0x105/0x200 [ 396.786180] stack_trace_save+0x8f/0xc0 [ 396.786619] ? __pfx_stack_trace_save+0x10/0x10 [ 396.787114] ? srso_return_thunk+0x5/0x5f [ 396.787562] ? stack_access_ok+0xd3/0x1d0 [ 396.788003] kasan_save_stack+0x24/0x50 [ 396.788436] ? kasan_save_stack+0x24/0x50 [ 396.788886] ? kasan_save_track+0x14/0x30 [ 396.789337] ? __kasan_slab_alloc+0x59/0x70 [ 396.789770] ? kmem_cache_alloc_node_noprof+0x14c/0x3e0 [ 396.790317] ? kmalloc_reserve+0x189/0x2b0 [ 396.790786] ? __alloc_skb+0x162/0x370 [ 396.791187] ? __netdev_alloc_skb+0x7a/0x7a0 [ 396.791648] ? __ieee80211_beacon_get+0x3f4/0xfc0 [ 396.792147] ? ieee80211_beacon_get_tim+0xa6/0x280 [ 396.792666] ? mac80211_hwsim_beacon_tx+0x49b/0x950 [ 396.793174] ? __iterate_interfaces+0x2cb/0x5d0 [ 396.793659] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 396.794311] ? srso_return_thunk+0x5/0x5f [ 396.794776] ? hlock_class+0x4e/0x130 [ 396.795188] ? srso_return_thunk+0x5/0x5f [ 396.795634] ? mark_lock+0xac/0x1370 [ 396.796047] ? __pfx___lock_acquire+0x10/0x10 [ 396.796528] ? qlist_free_all+0x28/0x160 [ 396.796969] ? __pfx_mark_lock+0x10/0x10 [ 396.797423] ? srso_return_thunk+0x5/0x5f [ 396.797876] ? find_held_lock+0x2c/0x110 [ 396.798306] ? __create_object+0x59/0x80 [ 396.798738] ? srso_return_thunk+0x5/0x5f [ 396.799189] ? lock_release+0x20f/0x6f0 [ 396.799629] ? __pfx_lock_release+0x10/0x10 [ 396.800101] ? srso_return_thunk+0x5/0x5f [ 396.800550] ? mark_held_locks+0x9e/0xe0 [ 396.800986] ? lock_acquire+0x32/0xc0 [ 396.801409] kasan_save_track+0x14/0x30 [ 396.801844] __kasan_slab_alloc+0x59/0x70 [ 396.802273] kmem_cache_alloc_node_noprof+0x14c/0x3e0 [ 396.802818] ? __create_object+0x59/0x80 [ 396.803233] ? kmalloc_reserve+0x189/0x2b0 [ 396.803691] kmalloc_reserve+0x189/0x2b0 [ 396.804131] __alloc_skb+0x162/0x370 [ 396.804522] ? __pfx___alloc_skb+0x10/0x10 [ 396.804955] ? __pfx_mark_lock+0x10/0x10 [ 396.805399] ? srso_return_thunk+0x5/0x5f [ 396.805848] ? trace_lock_acquire+0x137/0x1b0 [ 396.806328] __netdev_alloc_skb+0x7a/0x7a0 [ 396.806778] __ieee80211_beacon_get+0x3f4/0xfc0 [ 396.807285] ieee80211_beacon_get_tim+0xa6/0x280 [ 396.807798] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 396.808341] ? hlock_class+0x4e/0x130 [ 396.808753] ? add_chain_block+0x490/0x560 [ 396.809203] ? srso_return_thunk+0x5/0x5f [ 396.809649] ? lock_is_held_type+0x9e/0x120 [ 396.810115] mac80211_hwsim_beacon_tx+0x49b/0x950 [ 396.810624] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 396.811066] ? srso_return_thunk+0x5/0x5f [ 396.811454] ? srso_return_thunk+0x5/0x5f [ 396.811846] __iterate_interfaces+0x2cb/0x5d0 [ 396.812315] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 396.812860] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 396.813400] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 396.814032] mac80211_hwsim_beacon+0x105/0x200 [ 396.814535] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 396.815064] __hrtimer_run_queues+0x1ab/0xa70 [ 396.815559] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 396.816064] ? ktime_get_update_offsets_now+0x260/0x3c0 [ 396.816639] hrtimer_run_softirq+0x14c/0x310 [ 396.817108] handle_softirqs+0x1b1/0x770 [ 396.817540] irq_exit_rcu+0x94/0xc0 [ 396.817925] sysvec_apic_timer_interrupt+0x70/0x80 [ 396.818445] [ 396.818697] [ 396.818938] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.819487] RIP: 0010:qlist_free_all+0x28/0x160 [ 396.819986] Code: 90 90 48 8b 07 48 85 c0 0f 84 41 01 00 00 41 57 41 56 41 55 49 89 fd 41 54 49 89 f4 55 53 eb 3e 48 63 95 c0 00 00 00 48 8b 18 <48> 89 ef 48 29 d0 48 89 c6 49 89 c6 e8 e7 f0 ff ff 49 89 c7 66 90 [ 396.821650] RSP: 0018:ffff88803d8c74a0 EFLAGS: 00000246 [ 396.822173] RAX: ffff88801a6f3cb8 RBX: ffff88801a6f3de0 RCX: ffffea000069bcc0 [ 396.822859] RDX: 0000000000000000 RSI: ffff888008c4f780 RDI: 0000000000080000 [ 396.823542] RBP: ffff888008c4f780 R08: ffff88800c7f7000 R09: 00000000000d000b [ 396.824223] R10: ffffea000031fd00 R11: 0000000000000000 R12: 0000000000000000 [ 396.824904] R13: ffff88803d8c74d8 R14: ffff88800c7f7000 R15: ffff88800c7f7000 [ 396.825620] kasan_quarantine_reduce+0x19c/0x230 [ 396.826125] __kasan_slab_alloc+0x49/0x70 [ 396.826560] __kmalloc_cache_noprof+0x149/0x3e0 [ 396.827045] ? srso_return_thunk+0x5/0x5f [ 396.827513] ipv6_add_dev+0xfc/0x1370 [ 396.827917] ? lock_is_held_type+0x9e/0x120 [ 396.828374] ? srso_return_thunk+0x5/0x5f [ 396.828832] addrconf_notify+0x67a/0x1920 [ 396.829277] ? srso_return_thunk+0x5/0x5f [ 396.829731] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.830263] ? srso_return_thunk+0x5/0x5f [ 396.830718] ? cfg80211_netdev_notifier_call+0x16e/0xed0 [ 396.831264] ? srso_return_thunk+0x5/0x5f [ 396.831712] ? ipmr_device_event+0x196/0x200 [ 396.832163] ? srso_return_thunk+0x5/0x5f [ 396.832626] raw_notifier_call_chain+0xd6/0x140 [ 396.833110] call_netdevice_notifiers_info+0xbe/0x140 [ 396.833645] register_netdevice+0x1559/0x1ab0 [ 396.834117] ? __pfx_register_netdevice+0x10/0x10 [ 396.834618] ? __kvmalloc_node_noprof+0x180/0x200 [ 396.835117] ? srso_return_thunk+0x5/0x5f [ 396.835565] ? alloc_netdev_mqs+0xddc/0x1250 [ 396.836023] register_netdev+0x31/0x60 [ 396.836434] sit_init_net+0x28b/0x5c0 [ 396.836861] ? __pfx_sit_init_net+0x10/0x10 [ 396.837324] ops_init+0x1e1/0x650 [ 396.837715] setup_net+0x1d7/0x7a0 [ 396.838103] ? srso_return_thunk+0x5/0x5f [ 396.838561] ? __pfx_setup_net+0x10/0x10 [ 396.838997] ? __pfx_down_read_killable+0x10/0x10 [ 396.839481] ? __raw_spin_lock_init+0x3a/0x110 [ 396.839956] ? srso_return_thunk+0x5/0x5f [ 396.840404] ? debug_mutex_init+0x37/0x70 [ 396.840847] copy_net_ns+0x2e3/0x6f0 [ 396.841253] create_new_namespaces+0x3f6/0xaf0 [ 396.841757] copy_namespaces+0x45c/0x580 [ 396.842201] copy_process+0x2704/0x8e00 [ 396.842635] ? __pfx___lock_acquire+0x10/0x10 [ 396.843111] ? srso_return_thunk+0x5/0x5f [ 396.843563] ? merge_sched_in+0xcd/0x12b0 [ 396.844025] ? __pfx_copy_process+0x10/0x10 [ 396.844474] ? __pfx_lock_release+0x10/0x10 [ 396.844938] ? trace_lock_acquire+0x137/0x1b0 [ 396.845413] ? srso_return_thunk+0x5/0x5f [ 396.845862] ? lock_acquire+0x32/0xc0 [ 396.846278] ? __might_fault+0xe0/0x190 [ 396.846709] ? __might_fault+0xe0/0x190 [ 396.847131] ? srso_return_thunk+0x5/0x5f [ 396.847577] ? _copy_from_user+0x5c/0xf0 [ 396.848024] kernel_clone+0xeb/0x850 [ 396.848425] ? srso_return_thunk+0x5/0x5f [ 396.848878] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 396.849426] ? __pfx_kernel_clone+0x10/0x10 [ 396.849890] ? finish_task_switch.isra.0+0x206/0x840 [ 396.850423] ? finish_task_switch.isra.0+0x20f/0x840 [ 396.850979] __do_sys_clone3+0x1d5/0x250 [ 396.851406] ? __pfx___do_sys_clone3+0x10/0x10 [ 396.851890] ? srso_return_thunk+0x5/0x5f [ 396.852363] ? srso_return_thunk+0x5/0x5f [ 396.852809] ? __x64_sys_futex+0x1d3/0x4d0 [ 396.853237] ? srso_return_thunk+0x5/0x5f [ 396.853626] ? xfd_validate_state+0x51/0x180 [ 396.854022] ? srso_return_thunk+0x5/0x5f [ 396.854435] ? trace_x86_fpu_regs_activated+0x135/0x190 [ 396.854980] do_syscall_64+0xbf/0x1d0 [ 396.855358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.855855] RIP: 0033:0x7f7ac068cb19 [ 396.856210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 396.857728] RSP: 002b:00007f7abdc02188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 396.858411] RAX: ffffffffffffffda RBX: 00007f7ac079ff60 RCX: 00007f7ac068cb19 [ 396.859075] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00 [ 396.859750] RBP: 00007f7ac06e6f6d R08: 0000000000000000 R09: 0000000000000000 [ 396.860428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.861108] R13: 00007ffe92fe232f R14: 00007f7abdc02300 R15: 0000000000022000 [ 396.861811] [ 396.862057] Sending NMI from CPU 0 to CPUs 1: [ 396.862541] NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30 22:28:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40485404, &(0x7f0000000040)) 22:28:02 executing program 7: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 22:28:02 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 22:28:02 executing program 1: msync(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x5) 22:28:02 executing program 3: setfsgid(0xee00) setresgid(0x0, 0x0, 0x0) 22:28:02 executing program 5: setfsgid(0xee00) setresgid(0x0, 0x0, 0x0) 22:28:02 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x101) 22:28:02 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7ff, 0x1ff, 0x6, 0x7, 0x90cc, 0x8}, {0xfb, 0x7ff, 0x1, 0x0, 0x657856c6, 0x7}], ['\x00']}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080)="ee35", 0x2, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8001) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) dup(0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r2, 0x29, 0x31, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x40510, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:02 executing program 7: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 22:28:03 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x101) 22:28:03 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7ff, 0x1ff, 0x6, 0x7, 0x90cc, 0x8}, {0xfb, 0x7ff, 0x1, 0x0, 0x657856c6, 0x7}], ['\x00']}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080)="ee35", 0x2, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8001) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) dup(0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r2, 0x29, 0x31, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x40510, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x7) lseek(r0, 0x0, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:28:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3c72, &(0x7f0000000280), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000300), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/126, 0x7e}, {0x0, 0x1500000000000000}, {0x0}], 0x3) 22:28:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x17, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37373731383437373000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000002446d29025514b1c8845339908ad0491010000000c00000000000000d5f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002e00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d5f4655fd5f4655fd5f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000d5f4655fd5f4655fd5f4655f00000000000004000400000000000000050000000800"/64, 0x40, 0x2100}, {&(0x7f0000011700)="20000000500753ed500753ed00000000d5f4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="c041000000380000d5f4655fd5f4655fd5f4655f00000000000002001c0000000000000000000000090000000a0000000b0000000c0000000d0000000e0000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d5f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2a00}, {&(0x7f0000011900)="ed4100003c000000d5f4655fd5f4655fd5f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000e978bfbe00000000000000000000000000000000000000000000000020000000500753ed500753ed500753edd5f4655f500753ed0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011a00)="ed8100001a040000d5f4655fd5f4655fd5f4655f0000000000000100040000000000000001000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd4e152d00000000000000000000000000000000000000000000000020000000500753ed500753ed500753edd5f4655f500753ed0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011b00)="ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3737373138343737302f66696c65302f66696c653000000000000000000000000000000000000000000000e528a92800000000000000000000000000000000000000000000000020000000500753ed500753ed500753edd5f4655f500753ed0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011c00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011e00)="ed81000064000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c71163c9a00000000000000000000000000000000000000000000000020000000500753ed500753ed500753edd5f4655f500753ed0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x3000}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x4800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8000}], 0x0, &(0x7f0000012c00)) [ 398.054028] loop2: detected capacity change from 0 to 512 [ 398.774452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.452030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. VM DIAGNOSIS: 22:28:02 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8262d3d0 RDI=ffffffff886610c0 RBP=ffffffff88661080 RSP=ffff88806ce08dd0 R8 =0000000000000001 R9 =ffffed100d9c11ab R10=0000000000000000 R11=0000000065646f43 R12=00000000000000d7 R13=ffffffff88661080 R14=ffffffff886610d0 R15=ffffffff88661340 RIP=ffffffff8262d425 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7abdc02700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557e464c58 CR3=0000000040190000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=67ecacf0b884db427d4fabf2f2eeaf50 XMM02=074b689b9aa4fe7d33478641a85bf2df XMM03=3882f5ffa45e5b816d1db7a61e3f47a1 XMM04=e357e87ebde65b7b9a14b7e3ffd6b3d5 XMM05=955a6e1972bd4795c259b0fb2cdc22c4 XMM06=6d80568732175db440c994b444c895ba XMM07=f3288c622707a082ab098bc38e38cf31 XMM08=b6991913f96c3a8b224c6c3d40e61ad2 XMM09=00000003000000000000000000000000 XMM10=0c0d0e0f08090a0b0405060700010203 XMM11=3030785c3130785c20273d726464615f XMM12=4e4afd727c3406baab617b4481a845bf XMM13=689fe8dd40e3550db7a844ba9dd57131 XMM14=10f1a043bddba03975df7de6be792b7b XMM15=db3cb9cc0532ebd8b10c5c86e554a02f info registers vcpu 1 RAX=000000000017c323 RBX=0000000000000001 RCX=ffffffff848238d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812ad1ed RBP=dffffc0000000000 RSP=ffff8880096c7e68 R8 =0000000000000001 R9 =ffffed100d9e6c70 R10=ffff88806cf36383 R11=0000000000000000 R12=ffffffff863f2748 R13=1ffff110012d8fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8482487e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb54c13a030 CR3=000000000e6e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000414a6f3800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000