C_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000200)=0x1) rename(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 20:30:10 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x2}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:30:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x3, 0x0) 20:30:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {&(0x7f0000000280)="82b46cb12f231bbc4c73643bf2a93dd63c9937fd6647859e506e246826e8d9ddfd43fc2eefce5e8e406f441a8b20118f3e1fb62f41cc121b2100b894d4f4c414138ef8dbf6d96a52a40d065ffa2c425e8fdab73e3f7975cf877b0df4a986f07228bcdb2e0c", 0x65}, {&(0x7f0000000340)="b8b84cd59243125402212520379443b23efdf28a3ff799adcc5184e162599e4c242f80b109ec60c21c9fbb725659c93ad067343295a8fb083ef40e1bc4db00df4d9afe842d367a43f8864a18e03155619f10c13d69e24c2264f1be9e34dc5ecbb8a2b8c5ed675cf7cfbec598209731cb35fdd11283b5c5884f6b6e14e8707e3633c472a94420cf9b0c3b7b77097d625fe30c7fe11661164fde03f02a8fbf2646d93e0c6543451b58df9feb7a4d93902f83e3266ec8053484afc2feceec0849091ee5f93533f8276ae98d51524a9adbc96c2bf3224258057d9acc4cdaa1626c5d01f2de18a166678c40ab05bfd7c7389e4dd8948f389d", 0xf6}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:30:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x2, 0x7}]}, 0x14, 0x0) 20:30:10 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:30:10 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) [ 929.599906] FAULT_INJECTION: forcing a failure. [ 929.599906] name failslab, interval 1, probability 0, space 0, times 0 [ 929.601586] CPU: 0 UID: 0 PID: 8959 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 929.601622] Tainted: [W]=WARN [ 929.601630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.601643] Call Trace: [ 929.601651] [ 929.601660] dump_stack_lvl+0xfa/0x120 [ 929.601702] should_fail_ex+0x4d7/0x5e0 [ 929.601743] ? sk_prot_alloc+0x157/0x280 [ 929.601776] should_failslab+0xc2/0x120 [ 929.601815] __kmalloc_noprof+0xb4/0x4b0 [ 929.601847] ? do_raw_spin_lock+0x123/0x260 [ 929.601882] sk_prot_alloc+0x157/0x280 [ 929.601916] sk_alloc+0x34/0xbd0 [ 929.601941] ? __pfx_genl_release+0x10/0x10 [ 929.601971] __netlink_create+0x5d/0x280 [ 929.602008] ? __wake_up+0x3f/0x60 [ 929.602035] netlink_create+0x3ad/0x620 [ 929.602057] ? __pfx_genl_bind+0x10/0x10 [ 929.602084] ? __pfx_genl_unbind+0x10/0x10 [ 929.602115] __sock_create+0x369/0x810 [ 929.602156] __sys_socket+0x145/0x260 [ 929.602192] ? __pfx___sys_socket+0x10/0x10 [ 929.602226] ? ksys_write+0x1a3/0x240 [ 929.602261] ? __pfx_ksys_write+0x10/0x10 [ 929.602301] __x64_sys_socket+0x73/0xb0 [ 929.602337] do_syscall_64+0xbf/0x360 [ 929.602369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.602392] RIP: 0033:0x7fa9c2004197 [ 929.602409] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.602431] RSP: 002b:00007fa9bf5770c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 929.602453] RAX: ffffffffffffffda RBX: 00007fa9c2115f60 RCX: 00007fa9c2004197 [ 929.602469] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 929.602482] RBP: 00007fa9bf5781d0 R08: 0000000000000000 R09: 0000000000000000 [ 929.602497] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000001 [ 929.602511] R13: 000000000000002a R14: 0000000020000180 R15: 0000000000022000 [ 929.602540] [ 929.630037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.631643] loop6: detected capacity change from 0 to 4096 [ 929.639921] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 20:30:10 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x2000b) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7f, 0x0, 0x3, 0x9, 0x0, 0x1f, 0x90841, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x3800000000000000, 0x80}, 0x420, 0x9, 0x9, 0x4, 0x5, 0x7, 0x40, 0x0, 0x20, 0x0, 0x3}, r2, 0x6, r0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ea9000/0x11000)=nil, &(0x7f0000ed1000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ceb000/0x4000)=nil, &(0x7f0000000140)="8c86976dd4582a93a195ec6076f5cd2d3a861d24221daf16c5f38cc003c33964e27024ec10fc4b05c0cd7bd1ae7c105db5e486229ee54a3ff7878b00f9497f58ff67a07fa4f8838295679e75d13a12813b0ecaab6b9f75c1d0e9114dfe9ce18b3412776a74f64ba3d6de556734a5fc02d9e75e3cb2d2ca5bf155b72a1db954b27bdc742a6b80a334d8aaa484e24d1fd65dac4e791b248d74eacb066b79f05490af00ed6f80bde0595199d616a0a7e0d83506bf61043b2b217916a8765df60b8a5c9481689168f2f24d2d2a6e356b5d795ea5db218a5a4936a844c01f43e4", 0xde, r3}, 0x68) 20:30:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x2, 0x7}]}, 0x14, 0x0) 20:30:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="81000a"], 0xa) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 929.743593] loop6: detected capacity change from 0 to 4096 20:30:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x2, 0x7}]}, 0x14, 0x0) 20:30:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x4, 0x0) 20:30:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {&(0x7f0000000280)="82b46cb12f231bbc4c73643bf2a93dd63c9937fd6647859e506e246826e8d9ddfd43fc2eefce5e8e406f441a8b20118f3e1fb62f41cc121b2100b894d4f4c414138ef8dbf6d96a52a40d065ffa2c425e8fdab73e3f7975cf877b0df4a986f07228bcdb2e0c", 0x65}, {&(0x7f0000000340)="b8b84cd59243125402212520379443b23efdf28a3ff799adcc5184e162599e4c242f80b109ec60c21c9fbb725659c93ad067343295a8fb083ef40e1bc4db00df4d9afe842d367a43f8864a18e03155619f10c13d69e24c2264f1be9e34dc5ecbb8a2b8c5ed675cf7cfbec598209731cb35fdd11283b5c5884f6b6e14e8707e3633c472a94420cf9b0c3b7b77097d625fe30c7fe11661164fde03f02a8fbf2646d93e0c6543451b58df9feb7a4d93902f83e3266ec8053484afc2feceec0849091ee5f93533f8276ae98d51524a9adbc96c2bf3224258057d9acc4cdaa1626c5d01f2de18a166678c40ab05bfd7c7389e4dd8948f389d", 0xf6}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:30:10 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:30:10 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x9001, 0x7, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 929.921188] loop6: detected capacity change from 0 to 4096 [ 929.943184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:30:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r6, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000340)={0x0, 0x1, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000740)={r7, 0x1, 0x0, [0x0, 0x1, 0x8, 0x5f3, 0x20], [0x7, 0x401, 0xfffffffffffffffe, 0x4, 0x7e, 0x0, 0x9, 0xfffffffffffff000, 0x3f, 0x0, 0x80000001, 0x4, 0x7, 0x7, 0x3, 0xb309, 0x5, 0x94, 0x2, 0xffffffffffff9ea1, 0xffffffff, 0x8, 0xa076, 0x213, 0x8ae, 0xafc, 0xb3, 0x5, 0x9, 0x0, 0x500cbb15, 0x6, 0x3, 0x5, 0x80000000, 0x571, 0x80000001, 0x3, 0xc19a, 0x2, 0x8, 0x0, 0x4, 0x6, 0xfffffffffffffffd, 0x81, 0xffffffffffffffe0, 0x1, 0x10000, 0x1, 0x8, 0x401, 0x800, 0xffffffff00000001, 0x0, 0x2, 0x1, 0x0, 0x2, 0xf7, 0x8, 0x1, 0x0, 0x3, 0x5c, 0x100, 0x10001, 0x1, 0x4, 0x10000, 0x5, 0x2, 0x4d23, 0x200000000000000, 0x401, 0x4, 0x8, 0x7f, 0x6, 0x2, 0x2, 0x6, 0x102ff5d3, 0x2, 0x8, 0x7fff, 0x7, 0x5, 0x6, 0x2, 0x7fff, 0x5, 0x0, 0xfff, 0x200, 0x1b5, 0x3, 0xde4, 0x3, 0x43dd, 0x9, 0x3, 0xfff, 0x2, 0x5, 0x5, 0x1, 0x1, 0x9, 0x16c, 0x100000001, 0x3ff, 0xd7, 0x4, 0x5, 0xab, 0xb468fe6, 0xfb9d, 0x5, 0x4b2, 0x8]}) read$rfkill(r6, &(0x7f0000000200), 0x8) bind$packet(r3, &(0x7f00000017c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="7892f244b529a975eb2621a611793262ac5f000000f99a14cd4b7ef3e01413a3c62ed33ee1eb553c69bc892a9357d40fa16632d306f5fad5bd925bd2dedf50c6c1b3473cea6cda275c611efc17fdbab9d00402b6007c1e4f385d852f2e", @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf250800000054000180080003000300000008000100718f3040bf0256", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 20:30:20 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 6) 20:30:20 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x2, 0x7}]}, 0x14, 0x0) 20:30:20 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:30:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:30:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x8, 0x0) 20:30:20 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x3}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:30:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {&(0x7f0000000280)="82b46cb12f231bbc4c73643bf2a93dd63c9937fd6647859e506e246826e8d9ddfd43fc2eefce5e8e406f441a8b20118f3e1fb62f41cc121b2100b894d4f4c414138ef8dbf6d96a52a40d065ffa2c425e8fdab73e3f7975cf877b0df4a986f07228bcdb2e0c", 0x65}, {&(0x7f0000000340)="b8b84cd59243125402212520379443b23efdf28a3ff799adcc5184e162599e4c242f80b109ec60c21c9fbb725659c93ad067343295a8fb083ef40e1bc4db00df4d9afe842d367a43f8864a18e03155619f10c13d69e24c2264f1be9e34dc5ecbb8a2b8c5ed675cf7cfbec598209731cb35fdd11283b5c5884f6b6e14e8707e3633c472a94420cf9b0c3b7b77097d625fe30c7fe11661164fde03f02a8fbf2646d93e0c6543451b58df9feb7a4d93902f83e3266ec8053484afc2feceec0849091ee5f93533f8276ae98d51524a9adbc96c2bf3224258057d9acc4cdaa1626c5d01f2de18a166678c40ab05bfd7c7389e4dd8948f389d", 0xf6}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) [ 939.451359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.456571] loop6: detected capacity change from 0 to 4096 [ 939.458611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:30:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x18, 0x0) 20:30:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {&(0x7f0000000280)="82b46cb12f231bbc4c73643bf2a93dd63c9937fd6647859e506e246826e8d9ddfd43fc2eefce5e8e406f441a8b20118f3e1fb62f41cc121b2100b894d4f4c414138ef8dbf6d96a52a40d065ffa2c425e8fdab73e3f7975cf877b0df4a986f07228bcdb2e0c", 0x65}, {&(0x7f0000000340)="b8b84cd59243125402212520379443b23efdf28a3ff799adcc5184e162599e4c242f80b109ec60c21c9fbb725659c93ad067343295a8fb083ef40e1bc4db00df4d9afe842d367a43f8864a18e03155619f10c13d69e24c2264f1be9e34dc5ecbb8a2b8c5ed675cf7cfbec598209731cb35fdd11283b5c5884f6b6e14e8707e3633c472a94420cf9b0c3b7b77097d625fe30c7fe11661164fde03f02a8fbf2646d93e0c6543451b58df9feb7a4d93902f83e3266ec8053484afc2feceec0849091ee5f93533f8276ae98d51524a9adbc96c2bf3224258057d9acc4cdaa1626c5d01f2de18a166678c40ab05bfd7c7389e4dd8948f389d", 0xf6}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 939.766827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:30:30 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 7) 20:30:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {&(0x7f0000000280)="82b46cb12f231bbc4c73643bf2a93dd63c9937fd6647859e506e246826e8d9ddfd43fc2eefce5e8e406f441a8b20118f3e1fb62f41cc121b2100b894d4f4c414138ef8dbf6d96a52a40d065ffa2c425e8fdab73e3f7975cf877b0df4a986f07228bcdb2e0c", 0x65}, {&(0x7f0000000340)="b8b84cd59243125402212520379443b23efdf28a3ff799adcc5184e162599e4c242f80b109ec60c21c9fbb725659c93ad067343295a8fb083ef40e1bc4db00df4d9afe842d367a43f8864a18e03155619f10c13d69e24c2264f1be9e34dc5ecbb8a2b8c5ed675cf7cfbec598209731cb35fdd11283b5c5884f6b6e14e8707e3633c472a94420cf9b0c3b7b77097d625fe30c7fe11661164fde03f02a8fbf2646d93e0c6543451b58df9feb7a4d93902f83e3266ec8053484afc2feceec0849091ee5f93533f8276ae98d51524a9adbc96c2bf3224258057d9acc4cdaa1626c5d01f2de18a166678c40ab05bfd7c7389e4dd8948f389d", 0xf6}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:30:30 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x4}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:30:30 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140), 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:30:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(0x0, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x2, 0x7}]}, 0x14, 0x0) 20:30:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x40) 20:30:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x300, 0x0) 20:30:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {&(0x7f0000000280)="82b46cb12f231bbc4c73643bf2a93dd63c9937fd6647859e506e246826e8d9ddfd43fc2eefce5e8e406f441a8b20118f3e1fb62f41cc121b2100b894d4f4c414138ef8dbf6d96a52a40d065ffa2c425e8fdab73e3f7975cf877b0df4a986f07228bcdb2e0c", 0x65}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) [ 949.427229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.429861] FAULT_INJECTION: forcing a failure. [ 949.429861] name failslab, interval 1, probability 0, space 0, times 0 [ 949.431171] CPU: 0 UID: 0 PID: 9039 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 949.431198] Tainted: [W]=WARN [ 949.431203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 949.431214] Call Trace: [ 949.431219] [ 949.431226] dump_stack_lvl+0xfa/0x120 [ 949.431251] should_fail_ex+0x4d7/0x5e0 [ 949.431279] ? security_sk_alloc+0x101/0x160 [ 949.431296] should_failslab+0xc2/0x120 [ 949.431322] __kmalloc_noprof+0xb4/0x4b0 [ 949.431343] ? __kasan_kmalloc+0x7f/0x90 [ 949.431359] ? trace_kmalloc+0x1f/0xb0 [ 949.431378] security_sk_alloc+0x101/0x160 [ 949.431395] sk_prot_alloc+0x20b/0x280 [ 949.431420] sk_alloc+0x34/0xbd0 [ 949.431437] ? __pfx_genl_release+0x10/0x10 [ 949.431458] __netlink_create+0x5d/0x280 [ 949.431482] ? __wake_up+0x3f/0x60 [ 949.431501] netlink_create+0x3ad/0x620 [ 949.431518] ? __pfx_genl_bind+0x10/0x10 [ 949.431536] ? __pfx_genl_unbind+0x10/0x10 [ 949.431557] __sock_create+0x369/0x810 [ 949.431585] __sys_socket+0x145/0x260 [ 949.431609] ? __pfx___sys_socket+0x10/0x10 [ 949.431632] ? ksys_write+0x1a3/0x240 [ 949.431656] ? __pfx_ksys_write+0x10/0x10 [ 949.431699] __x64_sys_socket+0x73/0xb0 [ 949.431723] do_syscall_64+0xbf/0x360 [ 949.431749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.431766] RIP: 0033:0x7fa9c2004197 [ 949.431779] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 949.431795] RSP: 002b:00007fa9bf5770c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 949.431811] RAX: ffffffffffffffda RBX: 00007fa9c2115f60 RCX: 00007fa9c2004197 [ 949.431822] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 949.431832] RBP: 00007fa9bf5781d0 R08: 0000000000000000 R09: 0000000000000000 [ 949.431843] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000001 [ 949.431852] R13: 000000000000002a R14: 0000000020000180 R15: 0000000000022000 [ 949.431872] [ 949.440540] loop6: detected capacity change from 0 to 4096 20:30:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {&(0x7f0000000280)="82b46cb12f231bbc4c73643bf2a93dd63c9937fd6647859e506e246826e8d9ddfd43fc2eefce5e8e406f441a8b20118f3e1fb62f41cc121b2100b894d4f4c414138ef8dbf6d96a52a40d065ffa2c425e8fdab73e3f7975cf877b0df4a986f07228bcdb2e0c", 0x65}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:30:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendto$inet(r1, &(0x7f0000000000)="f7139af2dce1b0681ac835beeeafcd8c4a60ce1fe9165e51f3dfb2908206ff462548a721ee99f725bd14bee3b363c95a5125831c93df372a0f6376ebc563dc616303ca8eb167451c6e1827e9ccd403ac18f6914ffc67c73ef2f429ef3b1af6d30c4f80e5f38afaa3f13e2437935dd456263e96a867582c9009cddc9ef394ef94d290f62245", 0x85, 0x4000080, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000dc0)={0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x4000010) [ 949.547660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.603497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.747105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.801882] Bluetooth: hci4: command 0x0406 tx timeout 20:30:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x1800, 0x0) 20:30:41 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 8) 20:30:41 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x5}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:30:41 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140), 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:30:41 executing program 2: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) accept4(0xffffffffffffffff, &(0x7f0000000100)=@ethernet={0x0, @multicast}, &(0x7f0000000180)=0x80, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000200)={{0x2, 0x200, 0x1, 0x0, 0xa0e, 0x66}, 0x333, [0x9f9, 0xffffffff, 0x6, 0x61b, 0x4, 0x99f, 0x6, 0x0, 0x7, 0x6, 0xfffffffc, 0x9, 0x9, 0x80000000, 0x4, 0xfb7b, 0x3, 0xfffffffb, 0x1, 0x1000, 0x0, 0xf9fc, 0x0, 0x1, 0x10000000, 0x9, 0xffffffff, 0x2e6b8dc8, 0x100, 0x4, 0x0, 0x3, 0x1ff, 0x200, 0x20, 0x65, 0x8, 0x6, 0xbef, 0x2, 0x1ff, 0x4, 0x4, 0xa3, 0x7125, 0x19d, 0x228, 0x4, 0x1, 0x400, 0x8, 0x1000, 0x2, 0x3ff, 0x10001, 0x401, 0x10000, 0xca5c571d, 0xf78e, 0x6, 0x8, 0x9, 0x1, 0xfffeffff, 0x8000, 0x8, 0x0, 0x2, 0x7fff, 0xfffffffb, 0x0, 0x1, 0x1, 0x8001, 0x20, 0x7, 0x0, 0x8, 0x3f, 0x0, 0x1, 0x20, 0x57a1, 0x1, 0x2, 0xc5b, 0xfffffffd, 0x100, 0x9, 0xfff, 0x7, 0x81, 0x2, 0x14e, 0x4, 0xfc000000, 0x640, 0x9, 0x6, 0x3, 0xfffffffa, 0x7ff, 0x2, 0x6, 0x9, 0xff, 0x2, 0x1, 0x2, 0x2, 0x0, 0x0, 0x7f, 0x9, 0x800, 0x8, 0xf5a, 0x5f, 0x1, 0x3, 0xfff, 0x2020000, 0x1ff, 0x30000000, 0xf5, 0x10000, 0x6, 0xd03, 0x0, 0xa0e, 0x0, 0x1c0dcf21, 0x0, 0x3, 0x9, 0x4, 0x80000000, 0xfffffffa, 0xff, 0xfffffe01, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x9, 0x9590, 0x0, 0x4, 0x2, 0xae, 0x0, 0x7, 0x3, 0x9, 0x0, 0x1, 0x10000, 0x5, 0x4, 0x7fff, 0x1, 0x5, 0x6, 0x7, 0x5, 0x7fffffff, 0x6, 0xfffff800, 0x0, 0x5, 0x7, 0x7fffffff, 0x76, 0x5, 0x2324e869, 0x5, 0x1, 0x8, 0x87b, 0x7, 0x6, 0x4, 0x2, 0x3, 0x4, 0xfffffff7, 0x1000, 0x1, 0x10000, 0x4, 0x3, 0x400, 0xfffffff9, 0x6, 0xfff, 0x0, 0x300, 0x3, 0x0, 0xf, 0x3ff, 0x800, 0x6, 0xf4, 0x7e00, 0x80, 0x80, 0x5, 0x6, 0x30, 0x1, 0x5, 0x5, 0xd, 0x8, 0x7fff, 0x7, 0x9, 0x6, 0x10000, 0x2, 0x80, 0xf1d9, 0x3, 0x401, 0x5be8, 0x2, 0x80000000, 0x1, 0x5, 0x7, 0x8000, 0x3ff, 0x2, 0x3, 0x0, 0x1000, 0x3, 0x3ff, 0xfffffffa, 0x7ff, 0x7fffffff, 0x3, 0xff, 0xffffffff, 0x8, 0x0, 0x6, 0x101, 0x7f, 0x400, 0xff, 0x3, 0x4c, 0x7, 0xffffffff, 0x0, 0x1, 0x4, 0x401, 0x1, 0x1, 0x6, 0x0, 0xffff, 0x80, 0x7fffffff, 0xff, 0x4, 0x44a073a1, 0xfffffff9, 0x6, 0xffff, 0x5, 0x6, 0x5, 0x0, 0x80, 0x9, 0x2, 0x8, 0x9, 0x492, 0x1f, 0xa370, 0x1, 0x8, 0x299b, 0xfff, 0x3, 0x400, 0x7, 0x2b8a, 0x3, 0x3, 0x7, 0x3, 0x7306, 0x1, 0x2, 0xfffffff9, 0x0, 0x9, 0x8, 0x1, 0x200, 0x5, 0x6, 0xcb, 0xbe, 0x8, 0x2, 0x8000, 0xb1, 0x9, 0xd2, 0x1ff, 0x3, 0x1, 0x89b0, 0xff, 0x62, 0x0, 0x8001, 0x1ff, 0x3e, 0x7f, 0xffffffff, 0x1, 0xfffffffa, 0x7, 0x7f, 0xa4, 0x7, 0x8, 0x1c, 0x7, 0x750, 0x9, 0x62e1, 0x200, 0xca9e, 0x3f, 0x7, 0x100, 0x7fffffff, 0x9, 0x4, 0x1f, 0x80000000, 0x2, 0x3, 0x6, 0x8, 0x3c, 0x200, 0x7, 0x81, 0x33, 0xa6f4, 0x0, 0x3, 0x9, 0x1, 0x7fffffff, 0xeb52, 0xf641, 0x100, 0x3, 0x80000000, 0xfffffff8, 0x9, 0x3, 0x68, 0x6, 0xea5, 0x8001, 0x1, 0x126a, 0x6, 0x1, 0x0, 0x8, 0x3f, 0x1, 0x9, 0x0, 0xffff, 0x4, 0x4, 0x7, 0x1, 0x101, 0xa2af, 0x7, 0xfffffff8, 0x5, 0x8, 0x2, 0x0, 0x7, 0x9, 0x87, 0xffff, 0x6, 0x5, 0x0, 0xaa8e, 0x0, 0x4, 0xe4f7, 0x1, 0x6d6, 0x80, 0x3ff, 0x8, 0x7fff, 0x80, 0x5, 0xffffffff, 0x8001, 0x3, 0x2c81785c, 0x5, 0x0, 0x7, 0x4, 0x0, 0x6, 0x5, 0x800000, 0x6, 0x4, 0x7, 0x103, 0x2, 0x4, 0x20, 0x6, 0x1, 0x1, 0x4, 0xff, 0x6, 0x2, 0x5, 0x401, 0xfffff800, 0x3, 0x9, 0x8, 0x10001, 0x1, 0x0, 0x2, 0x1, 0x4, 0x10001, 0x101, 0x0, 0x4, 0x6, 0x80, 0x800, 0x2, 0x8, 0xfffffff8, 0x7, 0xfffffbff, 0x1, 0xa77, 0x4, 0x4e8a, 0x72, 0x40, 0x0, 0x4, 0x3, 0x400, 0x7ff, 0x6, 0x0, 0xb33, 0x7, 0x2, 0x8, 0x1f, 0x800, 0x4, 0x8000, 0x6, 0x6, 0xffff, 0x10000, 0xf7, 0xe0, 0x1, 0x8, 0x1ff, 0x6, 0x80000001, 0x4, 0xc00000, 0x1, 0x4, 0x101, 0x7fffffff, 0x8, 0x80000000, 0x20, 0x4, 0x8e2c, 0x9, 0x5, 0x2, 0x7f, 0xd40e, 0x0, 0x0, 0x7, 0xb5, 0xffffffff, 0x80, 0x20, 0x0, 0x7fffffff, 0x2, 0xfff, 0x1, 0x3, 0xfffffff8, 0x1ff, 0x5, 0xfffffff8, 0x3f, 0x8, 0x5, 0x6, 0x101, 0x3163, 0x80000001, 0x7, 0x8000, 0x2, 0x1, 0x9, 0x3f, 0xf7e0, 0x2, 0x918, 0x9, 0x8001, 0xfffffffd, 0x3, 0x40, 0x2, 0x3, 0x7, 0xfff, 0xe2b, 0xffffff18, 0x443b6b23, 0x0, 0x1, 0xa53, 0x3f, 0xff, 0xffffffc0, 0x0, 0x7f, 0x1, 0x40, 0x43c, 0xfffffffe, 0x100000, 0x0, 0x0, 0x0, 0x3d, 0x9, 0x3, 0xee, 0x1ff, 0x20, 0x1f, 0x6, 0x7ff, 0x5, 0x81, 0x0, 0x2599, 0x0, 0x8, 0x9, 0x9, 0x5, 0x6, 0x8, 0x7, 0x1, 0x37a2be5d, 0x1, 0x5, 0x3ff, 0x5, 0x8, 0xffffffff, 0x4, 0x8, 0x8, 0x1000, 0x1cdf20, 0x5, 0x7, 0x40, 0x7, 0x7fffffff, 0x400, 0x5, 0x6fad, 0x4, 0x3, 0x101, 0x9, 0x4, 0x7, 0x8, 0xfffffff8, 0x9, 0x0, 0x0, 0x1, 0x3, 0x4769, 0x1000, 0x8, 0x80, 0x2, 0x1, 0x6d769639, 0x800, 0x81, 0xff, 0x5, 0xf042, 0x7fff, 0x5, 0x1ff, 0x9, 0xff, 0x5, 0xe8, 0x3, 0x9, 0x8, 0xffff, 0x5, 0x401, 0x3, 0xfffeffff, 0x1ff, 0x3, 0x7, 0x1, 0x5, 0xfffffffa, 0x1, 0x9, 0xb0, 0x3ff, 0x6a, 0x100, 0xc0, 0x3, 0x8, 0x1000, 0x6, 0x9, 0x9, 0x60b, 0x2, 0xf6, 0x101, 0x6, 0x4, 0x7, 0xfff, 0x8001, 0xc7eb, 0x0, 0x3, 0x81, 0xc20b, 0x1, 0x795, 0x101, 0x22, 0x88de, 0xfff, 0xc50, 0x0, 0x7, 0x4, 0x9, 0x320, 0x1, 0x1, 0xd11, 0x20, 0xffffffff, 0x7cc, 0x5, 0x5, 0x2, 0x7fff, 0x2, 0x1000, 0x5, 0xbe, 0xc4, 0x0, 0x7fffffff, 0x9, 0xd9c, 0x4, 0x3f, 0xffffff00, 0x1, 0x0, 0x0, 0xfffffe00, 0x4, 0x4, 0x5, 0xffff, 0xc4, 0x7, 0x10001, 0x200, 0x6, 0x81, 0x7, 0x1, 0xff, 0xfffffff7, 0x333b7bfb, 0x7, 0x6, 0x2, 0x9, 0x8, 0x5, 0x4c2, 0x10001, 0x8f6f, 0xb950, 0x4, 0xac, 0x3, 0x8, 0x6, 0x7, 0xfb, 0xffffff90, 0x7, 0x1000, 0x9, 0x80000001, 0x40, 0x8, 0x2, 0x8, 0x43fd, 0x1f, 0x20, 0x4dac, 0x6, 0x707, 0x80, 0x6, 0x4, 0x3, 0x0, 0x6, 0x7fffffff, 0x4, 0x5, 0x471, 0x200, 0x1, 0x101, 0x401, 0x9, 0x73f, 0x8, 0x9, 0x2, 0x0, 0x4, 0x3ff, 0x1f, 0x8a0, 0xffffffc0, 0xfffffffe, 0x48000000, 0x6, 0x1, 0x3f, 0x80000000, 0x200, 0xff, 0x7000, 0x80, 0x9, 0x7, 0x800, 0x100, 0x0, 0x7fffffff, 0x8, 0x6, 0xf57f, 0x9, 0x7fffffff, 0x5, 0x80, 0x9, 0x800, 0xfe, 0x8, 0x6, 0x10000000, 0x81, 0x4, 0x6, 0x6, 0x4, 0x8ae, 0x5, 0x3, 0xe6df, 0xff, 0x1ff, 0x3, 0x0, 0xddd, 0x100, 0x0, 0x3, 0x4, 0xe370, 0x8, 0x0, 0x4, 0x9, 0x9, 0x0, 0x8, 0x6, 0x2466dcf7, 0x400, 0x757, 0x2, 0x10001, 0x80000001, 0x3979, 0x4, 0x3ff, 0x7ff, 0xff, 0x6, 0x9, 0x2, 0xc06e, 0x6, 0x8, 0x5d3, 0x3ff, 0x200, 0x3, 0x444, 0x8, 0x5, 0xeda, 0x0, 0xffffffff, 0xfd, 0x7fff, 0x10001, 0x0, 0xfffffeff, 0x22e, 0x5, 0x3f, 0x9, 0x3, 0x4, 0x0, 0x3, 0x6, 0xf6, 0x0, 0x8, 0x4, 0x1, 0x8, 0x5, 0x80, 0x2, 0x5, 0x20000, 0x6, 0xef, 0xe46d, 0x100, 0x5, 0x2, 0x80000000, 0x4, 0x3, 0x85, 0x1ff, 0x9, 0x8, 0x6, 0x6, 0x8001, 0x3, 0x8000, 0x3, 0x7fff, 0xc0c, 0x1, 0x7f, 0x8, 0xcc9, 0x1, 0x4, 0x2, 0x7, 0x0, 0x60a7bb46, 0xffff8abb, 0x10000, 0x4, 0x401, 0x4, 0x2, 0x81, 0x1f, 0x1, 0x81, 0x7, 0x9, 0x0, 0xffff8acf, 0x2, 0x10001, 0x1, 0x400, 0x7, 0x1, 0x4, 0x7, 0x7baf, 0x401, 0x20, 0x6, 0x4e4, 0x9, 0x5, 0x9, 0x8, 0xfffffff8, 0x8000, 0x0, 0x0, 0x7fff, 0x9, 0x3f, 0x5, 0x6, 0x79, 0x7, 0x1, 0x83, 0xffffffff, 0x8, 0xaa4, 0x61f1, 0x9, 0xc204, 0x10001, 0x290, 0x6, 0x7ff, 0x8, 0x4, 0x9, 0x4, 0x7fff, 0xcdb3, 0x7f, 0x6, 0x0, 0x8, 0x40, 0xda4, 0x4, 0x9, 0x2, 0xff, 0xbc3, 0x100, 0x81, 0x80000001, 0xa9, 0x5, 0x4, 0x84, 0x40, 0x8]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:30:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(0x0, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x2, 0x7}]}, 0x14, 0x0) 20:30:41 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140), 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:30:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {&(0x7f0000000280)="82b46cb12f231bbc4c73643bf2a93dd63c9937fd6647859e506e246826e8d9ddfd43fc2eefce5e8e406f441a8b20118f3e1fb62f41cc121b2100b894d4f4c414138ef8dbf6d96a52a40d065ffa2c425e8fdab73e3f7975cf877b0df4a986f07228bcdb2e0c", 0x65}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) [ 960.071543] loop6: detected capacity change from 0 to 4096 [ 960.085063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.105153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.125431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:30:41 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140), 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:30:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(0x0, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x2, 0x7}]}, 0x14, 0x0) 20:30:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x6, 0x1f, 0x20, 0x3, 0x0, 0x7, 0x20004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x40020, 0x2, 0x5abe, 0x7, 0x3f, 0x592, 0x8, 0x0, 0x3, 0x0, 0xffffffffffffff81}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 960.249292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:30:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x2000, 0x0) 20:30:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {&(0x7f0000000280)="82b46cb12f231bbc4c73643bf2a93dd63c9937fd6647859e506e246826e8d9ddfd43fc2eefce5e8e406f441a8b20118f3e1fb62f41cc121b2100b894d4f4c414138ef8dbf6d96a52a40d065ffa2c425e8fdab73e3f7975cf877b0df4a986f07228bcdb2e0c", 0x65}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 960.424034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:30:41 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="82", 0xfffffffe}]) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/73, 0x49}], 0x2, 0xf51, 0x1, 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x4, &(0x7f0000000480)=[{&(0x7f0000000280)="f900db1a5462efd25d8cbb779b6bb01e678d26cd481b5e7e839c491fb44bc74033d655f22300bba90e0085122e045ca4ee496ccaa93cefbfcbea682db71c955e0d135469a5aa47c82b675440cf1633aca8e3407d12c8df0e6a1d7137aabdcdcff1762895aceb63131fb4e1ddad4e2b23632f07a7f3bcfd16c976b459", 0x7c, 0x7}, {&(0x7f0000000300)="4ecc3e5ab1b3310cf3a52671062b8d7aacaffcfbb7820dff3658108cea0000155eefdd3ea127f66cc0ea8e5a38be4b60a853490752aa4c2e86ffceceb831db5d5178be66f4ca31e783881409cdcd711a060b78a2f177ac376375a1e538b254c3578a2e8c9803d8cbf70f02847733577f149e02e13b3be190f88075a27916c80c426e66422de5c5110f0d8a7316e068327bd38c2e1d86b2652460084ee322d2ffb6fe89da61d57c80ea", 0xa9, 0x8}, {&(0x7f00000003c0)="7eddbd9a4358cd89c39671f2df4eb798a868f329cb78f8afe1cd9699", 0x1c, 0x2}, {&(0x7f0000000400)="700f731b8dbe956dc305246d0fa38bb30e14e22089150525477a4b0edda6f953efc488ef8a1b2b7f7a1aec7a3a4c29fab1f923361cb4fb784407d964852f46e0d94d8d94e1750e6d5c30f5db5a06", 0x4e, 0xfffffffffffffff9}], 0x8008, &(0x7f0000000500)={[{@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@errors_continue}, {@nodots}], [{@measure}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_eq}]}) 20:30:41 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x280080, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) dup2(r2, r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 960.713092] loop1: detected capacity change from 0 to 16383 [ 960.720520] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 960.950544] loop1: detected capacity change from 0 to 32767 20:30:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x3f00, 0x0) 20:30:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x2, 0x7}]}, 0x14, 0x0) 20:30:51 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="82", 0xfffffffe}]) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/73, 0x49}], 0x2, 0xf51, 0x1, 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x4, &(0x7f0000000480)=[{&(0x7f0000000280)="f900db1a5462efd25d8cbb779b6bb01e678d26cd481b5e7e839c491fb44bc74033d655f22300bba90e0085122e045ca4ee496ccaa93cefbfcbea682db71c955e0d135469a5aa47c82b675440cf1633aca8e3407d12c8df0e6a1d7137aabdcdcff1762895aceb63131fb4e1ddad4e2b23632f07a7f3bcfd16c976b459", 0x7c, 0x7}, {&(0x7f0000000300)="4ecc3e5ab1b3310cf3a52671062b8d7aacaffcfbb7820dff3658108cea0000155eefdd3ea127f66cc0ea8e5a38be4b60a853490752aa4c2e86ffceceb831db5d5178be66f4ca31e783881409cdcd711a060b78a2f177ac376375a1e538b254c3578a2e8c9803d8cbf70f02847733577f149e02e13b3be190f88075a27916c80c426e66422de5c5110f0d8a7316e068327bd38c2e1d86b2652460084ee322d2ffb6fe89da61d57c80ea", 0xa9, 0x8}, {&(0x7f00000003c0)="7eddbd9a4358cd89c39671f2df4eb798a868f329cb78f8afe1cd9699", 0x1c, 0x2}, {&(0x7f0000000400)="700f731b8dbe956dc305246d0fa38bb30e14e22089150525477a4b0edda6f953efc488ef8a1b2b7f7a1aec7a3a4c29fab1f923361cb4fb784407d964852f46e0d94d8d94e1750e6d5c30f5db5a06", 0x4e, 0xfffffffffffffff9}], 0x8008, &(0x7f0000000500)={[{@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@errors_continue}, {@nodots}], [{@measure}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_eq}]}) 20:30:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:30:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:30:51 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x6}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:30:51 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:30:51 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 9) [ 970.685262] FAULT_INJECTION: forcing a failure. [ 970.685262] name failslab, interval 1, probability 0, space 0, times 0 [ 970.686600] CPU: 0 UID: 0 PID: 9117 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 970.686626] Tainted: [W]=WARN [ 970.686631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 970.686641] Call Trace: [ 970.686647] [ 970.686653] dump_stack_lvl+0xfa/0x120 [ 970.686679] should_fail_ex+0x4d7/0x5e0 [ 970.686714] should_failslab+0xc2/0x120 [ 970.686741] kmem_cache_alloc_lru_noprof+0x73/0x3c0 [ 970.686766] ? __d_alloc+0x31/0xa10 [ 970.686796] __d_alloc+0x31/0xa10 [ 970.686825] d_alloc_pseudo+0x1d/0xc0 [ 970.686843] alloc_file_pseudo+0xbe/0x220 [ 970.686864] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 970.686881] ? _raw_spin_unlock+0x1e/0x40 [ 970.686896] ? alloc_fd+0x2c1/0x560 [ 970.686922] sock_alloc_file+0x53/0x220 [ 970.686945] __sys_socket+0x1ba/0x260 [ 970.686971] ? __pfx___sys_socket+0x10/0x10 [ 970.686995] ? ksys_write+0x1a3/0x240 [ 970.687019] ? xfd_validate_state+0x55/0x180 [ 970.687043] ? __pfx_ksys_write+0x10/0x10 [ 970.687072] __x64_sys_socket+0x73/0xb0 [ 970.687097] do_syscall_64+0xbf/0x360 [ 970.687120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.687136] RIP: 0033:0x7fa9c2004197 [ 970.687148] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 970.687164] RSP: 002b:00007fa9bf5770c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 970.687180] RAX: ffffffffffffffda RBX: 00007fa9c2115f60 RCX: 00007fa9c2004197 [ 970.687191] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 970.687200] RBP: 00007fa9bf5781d0 R08: 0000000000000000 R09: 0000000000000000 [ 970.687210] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000001 [ 970.687220] R13: 000000000000002a R14: 0000000020000180 R15: 0000000000022000 [ 970.687242] [ 970.694846] loop6: detected capacity change from 0 to 4096 [ 970.700216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.758665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:30:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x4000, 0x0) 20:30:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:30:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x2, 0x7}]}, 0x14, 0x0) 20:30:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0xd2, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 970.812676] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:30:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x10040, 0x0) [ 970.888629] loop6: detected capacity change from 0 to 4096 20:30:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xec, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1f}, 0x0, 0x0, r0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:30:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x80000, 0x0) [ 970.967425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:30:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:30:52 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 971.048647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.051181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:30:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x200000, 0x0) 20:31:02 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:31:02 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="82", 0xfffffffe}]) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/73, 0x49}], 0x2, 0xf51, 0x1, 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x4, &(0x7f0000000480)=[{&(0x7f0000000280)="f900db1a5462efd25d8cbb779b6bb01e678d26cd481b5e7e839c491fb44bc74033d655f22300bba90e0085122e045ca4ee496ccaa93cefbfcbea682db71c955e0d135469a5aa47c82b675440cf1633aca8e3407d12c8df0e6a1d7137aabdcdcff1762895aceb63131fb4e1ddad4e2b23632f07a7f3bcfd16c976b459", 0x7c, 0x7}, {&(0x7f0000000300)="4ecc3e5ab1b3310cf3a52671062b8d7aacaffcfbb7820dff3658108cea0000155eefdd3ea127f66cc0ea8e5a38be4b60a853490752aa4c2e86ffceceb831db5d5178be66f4ca31e783881409cdcd711a060b78a2f177ac376375a1e538b254c3578a2e8c9803d8cbf70f02847733577f149e02e13b3be190f88075a27916c80c426e66422de5c5110f0d8a7316e068327bd38c2e1d86b2652460084ee322d2ffb6fe89da61d57c80ea", 0xa9, 0x8}, {&(0x7f00000003c0)="7eddbd9a4358cd89c39671f2df4eb798a868f329cb78f8afe1cd9699", 0x1c, 0x2}, {&(0x7f0000000400)="700f731b8dbe956dc305246d0fa38bb30e14e22089150525477a4b0edda6f953efc488ef8a1b2b7f7a1aec7a3a4c29fab1f923361cb4fb784407d964852f46e0d94d8d94e1750e6d5c30f5db5a06", 0x4e, 0xfffffffffffffff9}], 0x8008, &(0x7f0000000500)={[{@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@errors_continue}, {@nodots}], [{@measure}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_eq}]}) 20:31:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {&(0x7f0000000040)="019e3d498635", 0x6}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:31:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x2, 0x7}]}, 0x14, 0x0) 20:31:02 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 10) 20:31:02 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x7}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:31:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x1000000, 0x0) 20:31:02 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000300)=""/4096) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDELIO(r1, 0x4b35, 0xb00e) r2 = socket$packet(0x11, 0x2, 0x300) fcntl$getflags(r0, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000001300)={0x9, "68f1d8ccc0a6ff419d89bb682332f1b6ce512813ffc92bdc7f76818bc6de42a15ff9b598e71c800deafa4be7f47eb65e5aff8e0ae0abc07d65ae8d75aa164bcbdbb37fa94b7db575806d5e1092edb40d9063c7479ed9323e99c328b5bc9c1957c1fd04b8be6bab7d112a4181f09e2f6a54691521ceaf877ec80d7414cfad5990f7d77ab795d48cda33cbe3d187a7bc9bc4979965dad6dfd436a0fe7c13d3e844b2e6b4554fd6c9695253018e861ead798f48b4ac8844b824b0aadff56ecb3ef2e2f3dcd65e3d9de8b36bc397c8b4f80d282b3b62a689dd50559dea663a9f6875a7f4e8db7c04491a8d2e2f8093313168d07161f33d439b33adf70ccca5feb3c2b8cde9f32970221ec6e584b608e157c4bf83df9e4dc73b38f6962a0cba2e2b14f2553afc19279e0022993a04efd551af2a1fc959ed6b644f92f32a7d8ca1143ac73d4f41b04bee9e011559f782ed392a1f8464e928ecfcf36ac01561236ef1258628a4487cd19225d3f5efe63727e02a0538d6376e0dad9799f26f9de7b39d980cb72a1e8234d627163d04bf61bdbe0d9f4cc1f9bd11be62d15f2922afb291c6ea9fe3b52a32821edcb30b29f1557f71a417ef920530068ec4797ffc3a784cf292f8bd953d5de4ce387dbde70db1c2f6a568cb451794eed1500e74e4d1731834cf78a145a6844037a572fd759749781159111b76fc94b64f27a874278d4beca1"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x8) [ 981.813132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.819868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.839855] loop6: detected capacity change from 0 to 4096 20:31:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:31:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x2000000, 0x0) [ 981.909232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:31:02 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0x52, 0x8}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 981.937499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:31:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:31:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 20:31:03 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:31:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x3000000, 0x0) [ 982.076029] loop6: detected capacity change from 0 to 4096 [ 982.119428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 982.121167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.164180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:31:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:31:13 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="82", 0xfffffffe}]) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/73, 0x49}], 0x2, 0xf51, 0x1, 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x4, &(0x7f0000000480)=[{&(0x7f0000000280)="f900db1a5462efd25d8cbb779b6bb01e678d26cd481b5e7e839c491fb44bc74033d655f22300bba90e0085122e045ca4ee496ccaa93cefbfcbea682db71c955e0d135469a5aa47c82b675440cf1633aca8e3407d12c8df0e6a1d7137aabdcdcff1762895aceb63131fb4e1ddad4e2b23632f07a7f3bcfd16c976b459", 0x7c, 0x7}, {&(0x7f0000000300)="4ecc3e5ab1b3310cf3a52671062b8d7aacaffcfbb7820dff3658108cea0000155eefdd3ea127f66cc0ea8e5a38be4b60a853490752aa4c2e86ffceceb831db5d5178be66f4ca31e783881409cdcd711a060b78a2f177ac376375a1e538b254c3578a2e8c9803d8cbf70f02847733577f149e02e13b3be190f88075a27916c80c426e66422de5c5110f0d8a7316e068327bd38c2e1d86b2652460084ee322d2ffb6fe89da61d57c80ea", 0xa9, 0x8}, {&(0x7f00000003c0)="7eddbd9a4358cd89c39671f2df4eb798a868f329cb78f8afe1cd9699", 0x1c, 0x2}, {&(0x7f0000000400)="700f731b8dbe956dc305246d0fa38bb30e14e22089150525477a4b0edda6f953efc488ef8a1b2b7f7a1aec7a3a4c29fab1f923361cb4fb784407d964852f46e0d94d8d94e1750e6d5c30f5db5a06", 0x4e, 0xfffffffffffffff9}], 0x8008, &(0x7f0000000500)={[{@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@errors_continue}, {@nodots}], [{@measure}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_eq}]}) 20:31:13 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 11) 20:31:13 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:31:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x4000000, 0x0) 20:31:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000340)=[{&(0x7f0000000140)="e9f986447c8dbaace9e6dcf12543e704a2a83033db1625956ea0a21bf750258f272e997d262939941424c077ae3ca411a8ae119c5481b5c479c94023bad0be54ee1a9791e4d9641c9e11f8979ac20bca42b23bd6a3b2afd6ad899ac11ef50c7773873ed0306fbb1063c02129b2e6818e5c701be10468c7c50bad416ea8d0aefdb0ae17b806fb709a6ae2a15ba71a8c44c5dcacdcac92", 0x96, 0x3}, {&(0x7f0000000200)="1f6119a36e229c34e0fb8b8e0fddcc69de7b1c855877d7a4ef11497f8d2bf70e", 0x20, 0x3}, {&(0x7f0000000240)="2937fb463ac57bead7de974c1d8de980885a80bc08ad1389fc2f55cb2186d04059336be96d7b77515f53cac9581095a59e67f57b99f7fe39738ba79dc0599c1887e46bc99809c9a1f29ac5d0311ca77d514833b95fab9faadb186d5727c06e16b8921f07ed325f26fb969dedcb60242fa732e368bf291715b2aa56ccb0a9d0abd658708a1628f460ed14bd29b93eac8bbc62650530d8d935e7dc7256b9e1b4502f9b", 0xa2, 0x3}, {&(0x7f0000000300)="081ef97367f1ffe591932901884649cefa625321824411d0eaa0efa636b27945e03ebbaa48", 0x25, 0x2}], 0x1000, &(0x7f00000003c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@mpol={'mpol', 0x3d, {'bind', '', @void}}}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}]}) 20:31:13 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x8}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:31:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) [ 992.209677] loop6: detected capacity change from 0 to 4096 [ 992.217661] FAULT_INJECTION: forcing a failure. [ 992.217661] name failslab, interval 1, probability 0, space 0, times 0 [ 992.219354] CPU: 1 UID: 0 PID: 9212 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 992.219390] Tainted: [W]=WARN [ 992.219398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.219412] Call Trace: [ 992.219420] [ 992.219429] dump_stack_lvl+0xfa/0x120 [ 992.219463] should_fail_ex+0x4d7/0x5e0 [ 992.219504] ? alloc_empty_file+0x58/0x1e0 [ 992.219529] should_failslab+0xc2/0x120 [ 992.219568] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 992.219600] ? d_instantiate+0x79/0xa0 [ 992.219621] ? lock_release+0xc8/0x290 [ 992.219649] alloc_empty_file+0x58/0x1e0 [ 992.219676] alloc_file_pseudo+0x12b/0x220 [ 992.219711] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 992.219738] ? alloc_fd+0x2c1/0x560 [ 992.219774] sock_alloc_file+0x53/0x220 [ 992.219806] __sys_socket+0x1ba/0x260 [ 992.219842] ? __pfx___sys_socket+0x10/0x10 [ 992.219876] ? ksys_write+0x1a3/0x240 [ 992.219910] ? __pfx_ksys_write+0x10/0x10 [ 992.219950] __x64_sys_socket+0x73/0xb0 [ 992.219987] do_syscall_64+0xbf/0x360 [ 992.220018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.220042] RIP: 0033:0x7fa9c2004197 [ 992.220059] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.220082] RSP: 002b:00007fa9bf5770c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 992.220104] RAX: ffffffffffffffda RBX: 00007fa9c2115f60 RCX: 00007fa9c2004197 [ 992.220120] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 992.220134] RBP: 00007fa9bf5781d0 R08: 0000000000000000 R09: 0000000000000000 [ 992.220149] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000002 [ 992.220163] R13: 000000000000002a R14: 0000000020000180 R15: 0000000000022000 [ 992.220191] [ 992.281642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:31:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x18000000, 0x0) [ 992.326651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:31:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {&(0x7f00000001c0)="2bbb0f2d990a613f9e9b910c54152a126e8f5da6b0fd0a4bb865e5914bc293c76a2bc74763891ec1ce3dc78594bd6669941f23f13a68150d2c0921c261aab0ab78420c1729f96bf792d75f5ed752bb142ba073b89c21d81bd7338f383a33a45f4419bb5e17da79517706f7bc4abfb98d6c1f285fb7b23d0abfc255f35ccd65be06e33657901e26b470243da8bb0e5aab27df9ec100ff596e1a46422cd6d3d7daae245c99762766", 0xa7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:31:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 20:31:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) [ 992.470546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:31:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x3f000000, 0x0) 20:31:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4d00, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 992.574573] loop6: detected capacity change from 0 to 4096 20:31:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) [ 992.594234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:31:13 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 992.610997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.712084] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:31:23 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x9}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:31:23 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:31:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x40000000, 0x0) 20:31:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 20:31:23 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 12) 20:31:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5}, {0x0, 0x7}]}, 0x14, 0x0) 20:31:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:31:23 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 20:31:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) [ 1002.272245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.272413] loop6: detected capacity change from 0 to 4096 [ 1002.273905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:31:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:31:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x40000100, 0x0) 20:31:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 20:31:23 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1002.360619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.414555] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:31:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5}]}, 0x14, 0x0) 20:31:23 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) 20:31:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000100)="ce1cbc107677791d360d9b636d14c796b20a8d128b47d9856496eea2018480948a10cbd23e900b900d551baa0c6bdeea83de27cde46c0b8d2c237220a04ae5d1dd600c9273c82c9777c7fbd05f33fa348689d9a2672a8579cbea5f2654920eeec45363e75fa04be42be91442b048caaf6d46705a8e71fb94b4ceedab6d3c0ee46de6d8730426884e061d2a2c6f3ca28268bdadd61a37ef2365c49032618992", 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1002.593020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:31:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:31:33 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:31:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5}]}, 0x14, 0x0) 20:31:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x8000000000000, 0x0) 20:31:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:31:33 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0xf}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:31:33 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 13) 20:31:33 executing program 2: r0 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xa012, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)="aae0a0c925a9771d7e3da15cf74998d55e3891e2aa2a124ba8936dcaa874db30baa1245ed04ab6a019f86297adc5ee6b549401fa0234d765ef49341af91f6d07147e0b5ae7f481cf11e4e9588a74bf038150eb0c338ee1a2b9d96f83b8a2f1d2126993394ad608930ecd254878e18d287774794ddaf9795ff3f3c2020f806d8b8a7bfc15b8c71b6af77e0a9712e12fe3b5e47656115a26", 0x97, 0x7df}, {&(0x7f0000000200)="063a26a1ee884043a817580cb313d10fd940d2d642f68af937f52b017e5babe5f5bb0cc9dd9219bb38e54455f57f9603d8c78c203cc8882328078e1c3ed38734b16895e89ed488e4349e110839868232f493ba492c2a90b458a6e53af2459e28e74929ccb14e739ef38b3a81cffbc971ec05a930e332153928868737c08292ce09604080eca6f460d3a57e6018ff92a1510692387e1a2cf25864c128d8515a934c0512039edca279fd67e1211f9aa4077a2a2af1f0dc71fe54978e480489d1f724138023dfade9f11e23d84bd8a6e6510db77a379b89a3810b03cb867f97a34f1e8dcd05ea42772a0d11b104", 0xec, 0x6}], 0x1401, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f6401762f747479533300a849ca61fe2c664d26086187766b87c566ccc999e4a2b19075eaeb385118900700000000000000224f32c15e0b0bd075132c2f6465762f7474795333002c7065726d69745f646972836374696f2c6f626a5f726f6c653d2c", @ANYRESDEC, @ANYBLOB=',obj_user=/dev/ttyS3\x00,fsuuid=3db846b3-62]7-2862-5a90-\x00U068c36,euid<', @ANYRESDEC=0xee01, @ANYBLOB=',defcontext=user_u,appraise_type=imasig,hash,measure,\x00']) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 1012.757901] loop2: detected capacity change from 0 to 80 [ 1012.761343] FAULT_INJECTION: forcing a failure. [ 1012.761343] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.763155] CPU: 0 UID: 0 PID: 9310 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1012.763191] Tainted: [W]=WARN [ 1012.763199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1012.763212] Call Trace: [ 1012.763220] [ 1012.763228] dump_stack_lvl+0xfa/0x120 [ 1012.763264] should_fail_ex+0x4d7/0x5e0 [ 1012.763306] ? security_file_alloc+0x35/0x130 [ 1012.763335] should_failslab+0xc2/0x120 [ 1012.763374] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 1012.763406] ? __create_object+0x59/0x80 [ 1012.763438] security_file_alloc+0x35/0x130 [ 1012.763467] init_file+0x95/0x4c0 [ 1012.763493] alloc_empty_file+0x76/0x1e0 [ 1012.763519] alloc_file_pseudo+0x12b/0x220 [ 1012.763546] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1012.763572] ? alloc_fd+0x2c1/0x560 [ 1012.763609] sock_alloc_file+0x53/0x220 [ 1012.763641] __sys_socket+0x1ba/0x260 [ 1012.763677] ? __pfx___sys_socket+0x10/0x10 [ 1012.763718] ? ksys_write+0x1a3/0x240 [ 1012.763752] ? __pfx_ksys_write+0x10/0x10 [ 1012.763791] __x64_sys_socket+0x73/0xb0 [ 1012.763827] do_syscall_64+0xbf/0x360 [ 1012.763859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.763882] RIP: 0033:0x7fa9c2004197 [ 1012.763900] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1012.763922] RSP: 002b:00007fa9bf5770c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 1012.763944] RAX: ffffffffffffffda RBX: 00007fa9c2115f60 RCX: 00007fa9c2004197 [ 1012.763960] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1012.763974] RBP: 00007fa9bf5781d0 R08: 0000000000000000 R09: 0000000000000000 [ 1012.763988] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000002 [ 1012.764002] R13: 000000000000002a R14: 0000000020000180 R15: 0000000000022000 [ 1012.764031] [ 1012.807182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.810958] loop6: detected capacity change from 0 to 4096 20:31:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x20000000000000, 0x0) [ 1012.879374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:31:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:31:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x100000000000000, 0x0) 20:31:34 executing program 2: socketpair(0x28, 0x5, 0x80, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x15c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x15c}}, 0x4) pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000000200)="15c5633d9312ccd8175652f689747fcf7679783c7bed0fe30c7c18842e533138e4c29a8120a52495883279c8e1f112c96be433b751df8594c793d253fc43e25ab350ca1b283f8d211daf17fef1ff082416d9b6721d100e0a6f1733fd0ac630c707a8506bd55fa36aece45edcea1771918a2479efe5677c9e19a7c99033fdde7c6c3277cceab176599a297ad38f880f5f1478a333f406e7ba92f959396fbc765a181a36d830eb70858296263bf5cbbf76a18c89e83a06a157bbe2b09bc33d14b582054d0da171d4898cf6f243639c8ffd55294f3e436442db3ffaea7460e3014ccc7e830da108", 0xe6}, {&(0x7f0000000300)="dcfe89400f067235be2d562f8c6c860cc7327fc2f43d90e8b05b9b7caed60a4d62edc347b5517cbd0923b7f3602bafdeb0c11503311bd59db1d38ec5655f8a92ab54012782d8ea568a19e986b64e6d5fea318f20726ca8ed8b2563368e81112a545f1ac5ec070344aa9b7ca8ec908b1b9aca2ffdfbce3653eeb2aae7dfa62aaecb3edd6f9f638f0646355cc60d1260475a4a8d1faccd0d14ced1cac91385f90e700959accaea6e6eed5410231bfdf55dd4374b9c0c0654ca292a29d96debe61d5d415a4dee0f8bd51de3e43c1816d3a9d7cb52ef962bf3d79b8828dce85fea6bf60be22615b2", 0xe6}], 0x3, 0x4, 0xfffffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:31:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) [ 1012.982335] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:31:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x200000000000000, 0x0) 20:31:34 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:31:34 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) 20:31:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) [ 1013.122544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.125891] loop6: detected capacity change from 0 to 4096 20:31:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x300000000000000, 0x0) 20:31:34 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x10}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) [ 1013.184837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:31:34 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 14) 20:31:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x400000000000000, 0x0) [ 1013.302907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.305979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.390540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.615484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:31:44 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 15) 20:31:44 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x11}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:31:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x1800000000000000, 0x0) 20:31:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x11c) 20:31:44 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0xc) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x942e, 0xfffffffe}, {0x2, 0x1f}]}, 0x14, 0x0) 20:31:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:31:44 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1023.644401] FAULT_INJECTION: forcing a failure. [ 1023.644401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1023.645405] CPU: 0 UID: 0 PID: 9373 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1023.645425] Tainted: [W]=WARN [ 1023.645429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.645437] Call Trace: [ 1023.645442] [ 1023.645447] dump_stack_lvl+0xfa/0x120 [ 1023.645468] should_fail_ex+0x4d7/0x5e0 [ 1023.645492] should_fail_alloc_page+0xe0/0x110 [ 1023.645515] prepare_alloc_pages+0x1af/0x500 [ 1023.645528] ? lock_acquire+0x15e/0x2f0 [ 1023.645541] ? __is_insn_slot_addr+0x2e/0x290 [ 1023.645562] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1023.645582] ? lock_release+0xc8/0x290 [ 1023.645599] ? __is_insn_slot_addr+0x140/0x290 [ 1023.645618] ? kernel_text_address+0x5b/0xc0 [ 1023.645633] ? __kernel_text_address+0xd/0x40 [ 1023.645647] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1023.645673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1023.645692] ? policy_nodemask+0xeb/0x4e0 [ 1023.645710] alloc_pages_mpol+0xed/0x340 [ 1023.645725] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1023.645744] ? lock_acquire+0x15e/0x2f0 [ 1023.645756] ? ___pte_offset_map+0x31/0x370 [ 1023.645770] ? get_vma_policy+0x23b/0x350 [ 1023.645788] vma_alloc_folio_noprof+0xe9/0x440 [ 1023.645805] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1023.645822] ? find_held_lock+0x2b/0x80 [ 1023.645839] ? __handle_mm_fault+0x7ed/0x3310 [ 1023.645856] ? lock_release+0xc8/0x290 [ 1023.645871] __handle_mm_fault+0x148c/0x3310 [ 1023.645888] ? reacquire_held_locks+0xd1/0x200 [ 1023.645901] ? lock_vma_under_rcu+0x11e/0x530 [ 1023.645914] ? __pfx___handle_mm_fault+0x10/0x10 [ 1023.645932] ? lock_vma_under_rcu+0x17b/0x530 [ 1023.645949] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1023.645975] handle_mm_fault+0x2c3/0x9b0 [ 1023.645992] ? access_error+0x17d/0x380 [ 1023.646008] do_user_addr_fault+0x4fa/0xeb0 [ 1023.646026] exc_page_fault+0xb0/0x180 [ 1023.646041] asm_exc_page_fault+0x26/0x30 [ 1023.646054] RIP: 0033:0x7fa9c1fb5879 [ 1023.646064] Code: b8 2c 00 00 00 0f 05 48 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 44 24 20 48 89 54 24 18 48 89 74 24 10 <89> 7c 24 08 89 4c 24 28 e8 fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 [ 1023.646076] RSP: 002b:00007fa9bf576ff0 EFLAGS: 00010206 [ 1023.646087] RAX: 0000000000000001 RBX: 00007fa9bf5770f0 RCX: 0000000000000000 [ 1023.646095] RDX: 0000000000000028 RSI: 00007fa9bf577140 RDI: 0000000000000004 [ 1023.646102] RBP: 0000000000000001 R08: 00007fa9bf577044 R09: 000000000000000c [ 1023.646110] R10: 0000000000000000 R11: 00007fa9c205c72b R12: 00007fa9bf577098 [ 1023.646118] R13: 00007fa9bf577140 R14: 0000000000000004 R15: 0000000000000000 [ 1023.646134] [ 1023.666097] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1023.669886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.674373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:31:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) (fail_nth: 1) 20:31:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x3f00000000000000, 0x0) 20:31:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1023.750609] loop6: detected capacity change from 0 to 4096 [ 1023.766241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.772102] FAULT_INJECTION: forcing a failure. [ 1023.772102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.773191] CPU: 0 UID: 0 PID: 9384 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1023.773211] Tainted: [W]=WARN [ 1023.773215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.773223] Call Trace: [ 1023.773227] [ 1023.773232] dump_stack_lvl+0xfa/0x120 [ 1023.773252] should_fail_ex+0x4d7/0x5e0 [ 1023.773275] strncpy_from_user+0x3b/0x2f0 [ 1023.773294] setxattr_copy+0x86/0x210 [ 1023.773312] path_setxattrat+0xf2/0x290 [ 1023.773329] ? __pfx_path_setxattrat+0x10/0x10 [ 1023.773349] ? lock_release+0xc8/0x290 [ 1023.773366] ? __mutex_unlock_slowpath+0x157/0x750 [ 1023.773380] ? kernel_write+0x5f3/0x660 [ 1023.773401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1023.773417] ? __fget_files+0x20d/0x3b0 [ 1023.773438] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1023.773458] ? fput+0x6a/0x100 [ 1023.773470] ? ksys_write+0x1a3/0x240 [ 1023.773487] ? __pfx_ksys_write+0x10/0x10 [ 1023.773507] __x64_sys_lsetxattr+0xc9/0x140 [ 1023.773524] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1023.773544] do_syscall_64+0xbf/0x360 [ 1023.773560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.773573] RIP: 0033:0x7f300e6d2b19 [ 1023.773583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.773595] RSP: 002b:00007f300bc48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1023.773607] RAX: ffffffffffffffda RBX: 00007f300e7e5f60 RCX: 00007f300e6d2b19 [ 1023.773616] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000040 [ 1023.773624] RBP: 00007f300bc481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1023.773631] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 1023.773639] R13: 00007fff7b93164f R14: 00007f300bc48300 R15: 0000000000022000 [ 1023.773656] 20:31:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) (fail_nth: 1) 20:31:44 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/132, 0x84, 0x0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x2000b) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x2, 0x8, 0x0, 0x0, 0x100, 0x8058, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbed, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x12020, 0x3, 0x3, 0x1, 0x6, 0x7, 0x9, 0x0, 0x400, 0x0, 0x8}, r2, 0xc, r0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 1023.860513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.889224] FAULT_INJECTION: forcing a failure. [ 1023.889224] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.891014] CPU: 1 UID: 0 PID: 9396 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1023.891066] Tainted: [W]=WARN [ 1023.891079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.891100] Call Trace: [ 1023.891112] [ 1023.891126] dump_stack_lvl+0xfa/0x120 [ 1023.891176] should_fail_ex+0x4d7/0x5e0 [ 1023.891240] ? iovec_from_user+0xfe/0x130 [ 1023.891276] should_failslab+0xc2/0x120 [ 1023.891336] __kmalloc_noprof+0xb4/0x4b0 [ 1023.891390] ? lock_acquire+0x15e/0x2f0 [ 1023.891435] iovec_from_user+0xfe/0x130 [ 1023.891476] __import_iovec+0x88/0x4c0 [ 1023.891525] import_iovec+0x86/0xb0 [ 1023.891567] __do_sys_vmsplice+0x185/0xfb0 [ 1023.891603] ? perf_trace_lock+0xb5/0x5d0 [ 1023.891628] ? find_held_lock+0x2b/0x80 [ 1023.891661] ? get_pid_task+0xfd/0x250 [ 1023.891691] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 1023.891726] ? __pfx_perf_trace_lock+0x10/0x10 [ 1023.891751] ? proc_fail_nth_write+0x97/0x220 [ 1023.891787] ? find_held_lock+0x2b/0x80 [ 1023.891820] ? ksys_write+0x121/0x240 [ 1023.891855] ? lock_is_held_type+0x9e/0x120 [ 1023.891884] ? find_held_lock+0x2b/0x80 [ 1023.891916] ? ksys_write+0x187/0x240 [ 1023.891951] ? lock_release+0xc8/0x290 [ 1023.891980] ? __mutex_unlock_slowpath+0x157/0x750 [ 1023.892008] ? kernel_write+0x5f3/0x660 [ 1023.892046] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1023.892078] ? __fget_files+0x20d/0x3b0 [ 1023.892119] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1023.892158] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1023.892197] ? ksys_write+0x1a3/0x240 [ 1023.892231] ? __pfx_ksys_write+0x10/0x10 [ 1023.892277] do_syscall_64+0xbf/0x360 [ 1023.892309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.892334] RIP: 0033:0x7fc88cac3b19 [ 1023.892352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.892375] RSP: 002b:00007fc88a039188 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1023.892397] RAX: ffffffffffffffda RBX: 00007fc88cbd6f60 RCX: 00007fc88cac3b19 [ 1023.892413] RDX: 0000000000000009 RSI: 0000000020002600 RDI: 0000000000000004 [ 1023.892427] RBP: 00007fc88a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1023.892441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.892455] R13: 00007ffc0bcc581f R14: 00007fc88a039300 R15: 0000000000022000 [ 1023.892489] [ 1024.031397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:31:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:31:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) (fail_nth: 2) 20:31:53 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x12}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:31:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) 20:31:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x4000000000000000, 0x0) 20:31:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) (fail_nth: 2) 20:31:53 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) (fail_nth: 16) 20:31:53 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1032.781477] loop6: detected capacity change from 0 to 4096 20:31:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) (fail_nth: 3) [ 1032.812020] FAULT_INJECTION: forcing a failure. [ 1032.812020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.813094] CPU: 0 UID: 0 PID: 9417 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1032.813115] Tainted: [W]=WARN [ 1032.813120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1032.813128] Call Trace: [ 1032.813133] [ 1032.813138] dump_stack_lvl+0xfa/0x120 [ 1032.813161] should_fail_ex+0x4d7/0x5e0 [ 1032.813184] _copy_from_user+0x30/0xd0 [ 1032.813198] move_addr_to_kernel.part.0+0x40/0x120 [ 1032.813219] __sys_sendto+0x1da/0x570 [ 1032.813233] ? __pfx___sys_sendto+0x10/0x10 [ 1032.813244] ? css_rstat_updated+0x1b8/0x4d0 [ 1032.813269] ? find_held_lock+0x2b/0x80 [ 1032.813287] ? handle_mm_fault+0x590/0x9b0 [ 1032.813304] ? lock_release+0xc8/0x290 [ 1032.813318] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1032.813339] ? find_held_lock+0x2b/0x80 [ 1032.813355] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1032.813374] ? lock_release+0xc8/0x290 [ 1032.813385] ? access_error+0x17d/0x380 [ 1032.813404] __x64_sys_sendto+0xe1/0x1c0 [ 1032.813416] ? do_syscall_64+0x85/0x360 [ 1032.813432] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1032.813450] do_syscall_64+0xbf/0x360 [ 1032.813466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.813479] RIP: 0033:0x7fa9c1fb58ac [ 1032.813489] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 1032.813501] RSP: 002b:00007fa9bf576ff0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1032.813514] RAX: ffffffffffffffda RBX: 00007fa9bf5770f0 RCX: 00007fa9c1fb58ac [ 1032.813522] RDX: 0000000000000028 RSI: 00007fa9bf577140 RDI: 0000000000000004 [ 1032.813530] RBP: 0000000000000000 R08: 00007fa9bf577044 R09: 000000000000000c [ 1032.813538] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fa9bf577098 [ 1032.813546] R13: 00007fa9bf577140 R14: 0000000000000004 R15: 0000000000000000 [ 1032.813562] [ 1032.841994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.863207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.874675] FAULT_INJECTION: forcing a failure. [ 1032.874675] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.876499] CPU: 0 UID: 0 PID: 9412 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1032.876547] Tainted: [W]=WARN [ 1032.876558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1032.876576] Call Trace: [ 1032.876585] [ 1032.876597] dump_stack_lvl+0xfa/0x120 [ 1032.876642] should_fail_ex+0x4d7/0x5e0 [ 1032.876711] should_failslab+0xc2/0x120 [ 1032.876778] __kvmalloc_node_noprof+0x111/0x590 [ 1032.876834] ? vmemdup_user+0x2b/0xe0 [ 1032.876909] ? vmemdup_user+0x2b/0xe0 [ 1032.876966] vmemdup_user+0x2b/0xe0 [ 1032.877025] setxattr_copy+0x144/0x210 [ 1032.877079] path_setxattrat+0xf2/0x290 [ 1032.877134] ? __pfx_path_setxattrat+0x10/0x10 [ 1032.877193] ? lock_release+0xc8/0x290 [ 1032.877232] ? __mutex_unlock_slowpath+0x157/0x750 [ 1032.877274] ? kernel_write+0x5f3/0x660 [ 1032.877335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1032.877381] ? __fget_files+0x20d/0x3b0 [ 1032.877440] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1032.877502] ? fput+0x6a/0x100 [ 1032.877536] ? ksys_write+0x1a3/0x240 [ 1032.877592] ? __pfx_ksys_write+0x10/0x10 [ 1032.877653] __x64_sys_lsetxattr+0xc9/0x140 [ 1032.877707] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1032.877768] do_syscall_64+0xbf/0x360 [ 1032.877817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.877849] RIP: 0033:0x7f300e6d2b19 [ 1032.877872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1032.877905] RSP: 002b:00007f300bc48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1032.877932] RAX: ffffffffffffffda RBX: 00007f300e7e5f60 RCX: 00007f300e6d2b19 [ 1032.877955] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000040 [ 1032.877977] RBP: 00007f300bc481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1032.877999] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 1032.878020] R13: 00007fff7b93164f R14: 00007f300bc48300 R15: 0000000000022000 [ 1032.878048] 20:31:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:31:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x4000010000000000, 0x0) 20:31:53 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:31:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, 0x0, 0x8000000000000) ptrace(0x4208, 0x0) [ 1032.940569] FAULT_INJECTION: forcing a failure. [ 1032.940569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.942335] CPU: 1 UID: 0 PID: 9425 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1032.942390] Tainted: [W]=WARN [ 1032.942403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1032.942423] Call Trace: [ 1032.942431] [ 1032.942441] dump_stack_lvl+0xfa/0x120 [ 1032.942476] should_fail_ex+0x4d7/0x5e0 [ 1032.942519] _copy_to_user+0x32/0xd0 [ 1032.942546] simple_read_from_buffer+0xe0/0x180 [ 1032.942579] proc_fail_nth_read+0x18a/0x240 [ 1032.942616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1032.942651] ? security_file_permission+0x22/0x90 [ 1032.942690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1032.942725] vfs_read+0x1eb/0xc70 [ 1032.942764] ? __pfx_vfs_read+0x10/0x10 [ 1032.942798] ? lock_release+0xc8/0x290 [ 1032.942829] ? __fget_files+0x20d/0x3b0 [ 1032.942872] ksys_read+0x121/0x240 [ 1032.942903] ? __pfx_ksys_read+0x10/0x10 [ 1032.942947] do_syscall_64+0xbf/0x360 [ 1032.942979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.943002] RIP: 0033:0x7fc88ca7669c [ 1032.943021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1032.943043] RSP: 002b:00007fc88a039170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1032.943066] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc88ca7669c [ 1032.943081] RDX: 000000000000000f RSI: 00007fc88a0391e0 RDI: 0000000000000005 [ 1032.943096] RBP: 00007fc88a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1032.943110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.943124] R13: 00007ffc0bcc581f R14: 00007fc88a039300 R15: 0000000000022000 [ 1032.943158] [ 1033.008727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:31:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1033.035546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:31:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) (fail_nth: 3) 20:31:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1033.067155] loop6: detected capacity change from 0 to 4096 [ 1033.079010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.100826] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:31:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) (fail_nth: 4) 20:31:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)) [ 1033.169992] loop6: detected capacity change from 0 to 4096 [ 1033.173465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.222025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:31:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0xffffffff00000000, 0x0) 20:31:54 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x14}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:31:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000300), 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) read$rfkill(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="a34d9d8e", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="080026006c09000008009f0000000004"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8202801}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042dbd7000fcdbdf253d0000000c009900ff0100004c00000008005d0000000000080000000000000008005d000100000008005d0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x44046490}, 0x4010) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f00000017c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0xff45, @remote}, 0xfffffdad) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @link_local}, 0x10) 20:31:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0, 0x8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1033.242215] FAULT_INJECTION: forcing a failure. [ 1033.242215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.243258] CPU: 0 UID: 0 PID: 9446 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1033.243279] Tainted: [W]=WARN [ 1033.243283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.243292] Call Trace: [ 1033.243296] [ 1033.243302] dump_stack_lvl+0xfa/0x120 [ 1033.243325] should_fail_ex+0x4d7/0x5e0 [ 1033.243349] _copy_from_user+0x30/0xd0 [ 1033.243363] vmemdup_user+0x7e/0xe0 [ 1033.243384] setxattr_copy+0x144/0x210 [ 1033.243403] path_setxattrat+0xf2/0x290 [ 1033.243420] ? __pfx_path_setxattrat+0x10/0x10 [ 1033.243439] ? lock_release+0xc8/0x290 [ 1033.243455] ? __mutex_unlock_slowpath+0x157/0x750 [ 1033.243471] ? kernel_write+0x5f3/0x660 [ 1033.243492] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1033.243508] ? __fget_files+0x20d/0x3b0 [ 1033.243528] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1033.243549] ? fput+0x6a/0x100 [ 1033.243561] ? ksys_write+0x1a3/0x240 [ 1033.243578] ? __pfx_ksys_write+0x10/0x10 [ 1033.243597] __x64_sys_lsetxattr+0xc9/0x140 [ 1033.243614] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1033.243633] do_syscall_64+0xbf/0x360 [ 1033.243650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.243664] RIP: 0033:0x7f300e6d2b19 [ 1033.243674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.243691] RSP: 002b:00007f300bc48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1033.243703] RAX: ffffffffffffffda RBX: 00007f300e7e5f60 RCX: 00007f300e6d2b19 [ 1033.243712] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000040 [ 1033.243720] RBP: 00007f300bc481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.243728] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 1033.243736] R13: 00007fff7b93164f R14: 00007f300bc48300 R15: 0000000000022000 [ 1033.243752] 20:31:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:31:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x46800, 0x0) [ 1033.315383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.325427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.349938] lo: entered allmulticast mode [ 1033.351068] lo: left allmulticast mode 20:31:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) (fail_nth: 5) 20:31:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x2) [ 1033.435820] loop6: detected capacity change from 0 to 4096 [ 1033.462613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.498381] FAULT_INJECTION: forcing a failure. [ 1033.498381] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.500398] CPU: 1 UID: 0 PID: 9471 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1033.500443] Tainted: [W]=WARN [ 1033.500452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.500469] Call Trace: [ 1033.500478] [ 1033.500489] dump_stack_lvl+0xfa/0x120 [ 1033.500528] should_fail_ex+0x4d7/0x5e0 [ 1033.500574] ? getname_flags.part.0+0x48/0x540 [ 1033.500605] should_failslab+0xc2/0x120 [ 1033.500647] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 1033.500699] getname_flags.part.0+0x48/0x540 [ 1033.500733] getname_flags+0x95/0xe0 [ 1033.500770] path_setxattrat+0x25d/0x290 [ 1033.500808] ? __pfx_path_setxattrat+0x10/0x10 [ 1033.500850] ? lock_release+0xc8/0x290 [ 1033.500883] ? __mutex_unlock_slowpath+0x157/0x750 [ 1033.500927] ? kernel_write+0x5f3/0x660 [ 1033.500968] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1033.501003] ? __fget_files+0x20d/0x3b0 [ 1033.501046] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1033.501087] ? fput+0x6a/0x100 [ 1033.501113] ? ksys_write+0x1a3/0x240 [ 1033.501150] ? __pfx_ksys_write+0x10/0x10 [ 1033.501192] __x64_sys_lsetxattr+0xc9/0x140 [ 1033.501230] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1033.501271] do_syscall_64+0xbf/0x360 [ 1033.501307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.501334] RIP: 0033:0x7f300e6d2b19 [ 1033.501355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.501382] RSP: 002b:00007f300bc48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1033.501408] RAX: ffffffffffffffda RBX: 00007f300e7e5f60 RCX: 00007f300e6d2b19 [ 1033.501427] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000040 [ 1033.501444] RBP: 00007f300bc481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.501462] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 1033.501479] R13: 00007fff7b93164f R14: 00007f300bc48300 R15: 0000000000022000 [ 1033.501513] [ 1033.623356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.632131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:32:06 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x15}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:32:06 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) (fail_nth: 6) 20:32:06 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:32:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x2) r1 = memfd_create(&(0x7f0000001b80)='(\xe8\xf5\x82j\xca', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fff}) 20:32:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0, 0x80000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1044.992887] loop6: detected capacity change from 0 to 4096 20:32:06 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:32:06 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x3) 20:32:06 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x20, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000010c0)=0x3f) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000000c0)={{r0}, "7e22e294cf2bafdd0f574e7c51641e83d7a3bed4cf9ac6249ff2f7842edb96e14c825b55a56dc63c5d3f2092129adddce391a9796d4904f5c2a86892c0b72c9fd7390a8cdb0151840b422d3393d6421df74dd2b6d471459aa53ca7e94746255b910cfa2c9bc2f605bf5105f5ea3903466f43c5403cc1bce5179ad8c15da26a8be79a5607ff4ef49d0d4c7952f0d0fea504795822d173bd6908ae55ea8282e8223037b7e33cab7795ec7c35038dbd0b97d8487eb61167e7b6168c5ccea664be85256b4e3cb0a56b41e73a31dbbf521f80c97c111d79b21b8f6c35f36395d9ec7323193332048d1fade6ab8bbaf83b690a85ef1e066cb0d208bd71871b63eebd4633940d27136ea24667f7edf4490431bce3cd0723cce9ee60f5c95d77e4f616b0933e24ff92fe4886fc964e7a8f109a9055e563ec179fe8115a25105f3ac8cd96b8fe31d56280031c5f9c04559607ff18c37794dd4c2497bb653960bfcb2daedb78c219f6493502a14f411afc0202600658165ff74824d965f26baaaffde93d2f5b97e41daf698ba48a07729a69e360222b95e29a029a71ec6ecd617fb146af628f10cf7d696fb27595fa00645ce32d67217e7c6ade5859cfde756d4204342641e1197305ff83999664866092e8f94e191a4251e0649817fc8095ec90f6bc3eca345a5507cdefb454bf04502d5be42c0d8512ad6ad53ed3d0db57b2295ea8e1b256be75c92306b19c591e7f1d8eef837456f572e9f65da720d2f1b1e336597f92dd5e502d6ced850d9fa6bd29436f9634a74c35b0a2a96ad65cf13cdcafd498ce83487a7a7b7c1cd4b53b09a982523a71d265faa7348fb88f1e500120fd0b7a7e3aa60c6409fc02a612b3b6b223e9b0867f3697e8900f5aa19447c648d798e3ad89b46c04640f6136a412febc49dbc621c005115167b45f4e4df29a33519582385c3521bd9b541f7c2f9b00f556f463a7b062c7a4efae0958b23ce447aa823fbf741cab172dd55d1920e36a577b087a9584a75ab0c7bc68b0303d47be34528435b37149512f59352449fae7dc61f56142438d7c277a8a58bd0215efd2af43075c453df6e9164dd4bf4d105b3fe76a3fb9fbd57587310abdc728b6ec25814d74a8dfa532228f619e8f5a04cd713555d9490eee7ccadf877df242920a53032fe2b94ddb7e3a3ec2575081e8ab341719de1ebea24fe72b4e84da453c576c9840986d05df8c0e16d7d620860b454b252ec75e4c42c9d94df85cf770702a9aa93a9a43c4a43629e6d8965737e2c1555972293992eca084a34c20bc5cb572388517717f1ff2da74d16bd0beea5148303b51ad46aff1136ee2330f84b6905bcb2205cfdc6ac95810d9f14f599acd39e7490a8897d6d314f33c073a4f85ca936841b937d62d68c4091a5260f2b7a3d8b1a19475afca960b4ceba046a3f1ab7a99221157f153120ae5972d00eeb802794bb5dcaa29dac1a7d5416f1cb235ba5260730eab20d36fda750acaa0224e8848d51ecf668fea318697bba65e1f244694c42d73200da364f549b994db3df793bf65372f3d67ccfb465478119332a833110adcf8cc35dc336c72eedceadef8c559e65c1bb4ef6378c9826cbef8a91238ee7ba4a5c0a4bc9c7035c7d305fb9e2e996d093f6f4190fa55d9d350aff24873bf7129f140ac810d661b00c020d5f8655ff58bbf8843e41a990e038afbee0feb72453cb5d0e8edbb551c6be5d921376c427fb5d38b4f1201b2e8203492e4a06016107f2cb8114b42d878029d3ddf628387dd4308daf8db3eba2cbd79a0aee551d7294724ccd2e5ec54a7a10b1d753ff2a0d18d86b908531ab7fa93a185b32b9d4923cdf49b1f4585d9d5aa9e893d969f12ce68eea430c72d1fa232737bd16096467d27a3051a013482b5f0f1caa81a0c23f6b98eb5639a208c70d31152de52e6666ea83e8b82a4c2e45ca14dd0e1420373f9741cb1c70b52ba9d7daba41394e5eadb33d1c39495959a58e40b4d52addfaa24d17deecf9338664fbd44c5488ea8819d9decf9bd1d0f35939c2aa130dbf4a8d68a080ffe4ed1f49169849a66124fd2f736232d8e227029b0e6d9ab81fa5437977303131c2bb695a314c8dc4a916207ebb94f1750f3492b98c1b68bcac761b66f82a9664afeecc67bc523599995d4bb0cf4b587f9ebb5b28b978e388bff2d82127af46b7cc3f85b36dbb18fd4059bbec3d65d6224d1ab2a90ebe3fa1f806484932e568c71f25a7815dce4ed0e082a085387a0c4d1998c3639f4926633743848e8119c52cfb00d816d563795bc5394a6460811800875a505239dd4000ae0cb321c4b536765444c9725ccbeff069c9563e707203d8537e6c8c5681ecdf29cddba09ab9a61aec51b2d56fe422b729942a3d797f18b9134898120e49881bcdc4d0db8cdda53c5b86364aea4305d4a64ecfe85ce563eec31bb43e26d5462922b6c362e12ea139107ebf3966ede82bdbae9d0db3c34a7d0b99bec5c761ac47b782bd0112b2991a74b4923ffe971a9d33d86d3df61c355e8576408c73ce6f952fff4ca46cc7df86b1385c4b516927c47777172bec84add58381914c71cb4d3c740481a739662ad752683944bc57ec79a80967404bfe668d8b4cad27bb319c44f918f074b5c6199a00f53b8f3b395414b854b618f0dde6f37bc05b5237973acd5aef46634ccc119d3232d9f99c422872ba82aee0011e672adeb1d2141c455fc96a6ae63ccd6ac5104b25788fa38e4ef2d89e35ae1acb0b562e347d11e47c9ea457ebc385d664d5426b2c1f955323676d3a342bcb5f7585df8879cbf05fb75119f4dd8e673a2801e493fec58c18e1268f77816486a00d67ea926a144d7a1bb312f9d640da1592a043b081feba9a13c635223fac96dfd24e6aeb780dcbf298ba284c7e65c5de871c1a4b94cf6724cd64c0ca1d1eb006af90c1bdc3d35aa8fc114779bae09e5c2db67080fcdbc288ff8ff652a4834d4c3aeb2a0bf511c560250488efc3605f7ad263166c47b46989e0db359244c9cfc01e35b8455c1df4f82eb204078085edc83785a3230173c90d40848b2706db73c912fe6eb7f4ebd8b7dbe42078f2cbd1c569d5864076333fe26b16304c1ae02ea6d9b7dea91e9917d8d9e176466d1cc6c7eff80656f65b52755dc863eda2502416ee656caccb7e596293241579fd65e07085ebea1451ec18bc4fb7bad35b1bfee93df06562f07b2c0df5c0404d43220f404618543c554f8431acc2eca71413ca593e5bc38c48a3fcf4222f93fa030b2964851e99e121b2f81f086d50771c66b2bb4265ef35ffd2e64c6af697879d700feea7e8a1307cfd3a389117fcf616b8a451a6aac20a3fb29334353737790fa595ffd5555fdeae25106c7ab238615cf1567ba030e89cbcc42837e985fb34eef936879f94e6e0a1977f5e2fe3297b2ebc7262761d0934b45df5844a7d089fa8ae14d9e3ea40c6e1399820a4559c29d04307d03bf750c2fdadfe618ea01f594c8fa5e4c063b8c3e49dd4412ceea9dafc760d94aed373d6a24882e9b01b135324059cf0387b979f76b51a9b9b15de9828dd66fee7b0ca9bf676086e1c192215c997e959ae5e4b9adb701eaa4ce8a8ee82e14cda5b9c4688b96723f0c0512ac87aa9ea2f2e80b6ef9bde07105b9f69d825de6aaefa649713ad1202af7012623df58390dacd36f9de0b8bebd762ea6e28ec14200d56927b1b44ca7745fbb411c346f0de3701ea5b4408ea5cb70a6a697715a685684e3040d7ec7a27a916930eb6c712dfdd87ca8c7d5c13e8f5acaa4018439effe6285152aac3fc406b7f676cd46bbd189028e69df60086e6e51440cfad12f5fa4fc51df645e8b6a9cd352d455f8a3fbdea334253a8876737ef4cc44264130c4fb41a78b904e1e995f2f330e63a50da4e451a5206854a6b55d37e3b422a2e97deafee97238c7b5f7ce68fcb8ec153faa2d0d46e0140df365873845c553d05e83eb3117d075a23e348e89bc32f05fb49b93cd251f33ce41bdc71c9343ecd18aec0c8848b3d726de540aa447119573e164ef08ad488f90fc5de52673af5cd49f46cdedb2299fa492799d197b337a14afb546615aadec05ad8fc1418d86b35e7014a1c82d57693f805ee8ed6ae546c824f0b1a76d821628ad4892016770a2b2d89de123366f07c40426053ec3431dd98538da7cec981dfa7fe34e1836c5d739d001ebf3aeaf0ddb8a3cb1c2c4bc9df52a8e5cfa524ec946af913147f7d9e9240e0bb6e1b1bdf107caf9f116537f9216d5993ef5901695aac5147b5e61cbc14e6c33cb4521386cad33fffa04076cafad83371c29a3f5e14c61380114c2be56f046bdadec83530fefecd97d72393a5a1ccabcd0f26ca40ebe8082475c7359e2b8c08de68104628a58566f58c9cec8762d2b59ef9441c2ab4378880ebb013093234950536a155707f6f0833ea6b8950bf55334e1b2d16bd657a67c1d6ca3091ba9297c5a0025c3398277ec9cc6543a0d5efc120789d49c50271ff164a2e40768a4aecedf57f1dfbde849d84094288a50faebe649b593d44fc082c19c34e4a5d1df1b850d44a39e4d69a1f443095953f94746b472099863ef9c8055ad57685c2df75e811240ff5fcd91e92a239b78e2455b510be332897993b2465953bcbb5404cc05d3fbc30abbc2d56ecccb72d42f117d1ff5365aaf0199751ba2503e11023dde0c28336d0907536db6fd0c53e817b7faec2461e112bedb86626bcd49b6607c8be1c5fd777efdf32d58dfb27b6bd6feef5ca4df8ba26cb7310db4a73c7df06b60aa1658d8077a8a613a46f10b74ed46d3cd765e9a4a2965fa5c78bb836c0c656a793e66f882460e158c3406da9f9369cf44bc49802059917a403f092f0a400c974a099a503dacc32f7b2a96abb37a7b49089ed78ca0816fba462efeb344845fef40b9d3fcde3279e13920db17675fba819561e767f190a4faf86235d18f0db2695be77c9f6001a26ffa6943173daf2452e7102980c315877ada7c2c8a0c1a951ef8332f1aa1913d97d84c9717ffd92d8904e04fe75c27b541b8bde40237ac69e27f0be8e409bddc24b1cc6415faaff8686d692385bcd34e03ffe845032cd13cc505a205139f03c5a67f538121c9497651241fbb8e8e13a7b841d33e14462c256b2328ea00c40e19eb3008b9aea82c9eef97c63ffbcee8c6eb993b5bb3cacbde8c917a63e1ed5a1851d4d9eaf5bec72830264931d29d91058e97d3917933814b295d2a3e4ee3aab2e8ea9908d7f8806d38f1399ddc12e8ef3bb88ae597db479dc59a5c08ede4a877603d85d5b6494f7ab224216ca467b58a1f5e578c7e218308e3fef0620d2b2b131be79429890c9d6bae7c6271513cb129c2615e0b271fa553d321c7681b5f80fed0521a1054155c15800442e9c3eef151c05975807cbdd1b8480e1224f386a9915635fcc63e5631f3b096f1148148f9595d795e23cd7128a656ea7faa22e48964372d2283bee6722d8ed1e9d48f8c32b60c00d30f3d76cd167c251fe3c54950e916850d45134458aa44605a829a025e83358e8046cab1e60baa17cb34490222557de9a68f43cb81c5cab1f25c759fc9e07abda223a1553a5209f624c1afcf90bf5d6e4a4ffd503271a8ce3cb6e0bb9bdbc09c91d586c863e0184e4911a4579d492a82aa955985211b6b3cf8f6531649a2d4d8f80842c2aeb9f3f08a1aefeb76cb165464312b118a534da048718267bca5535af0c433ca1934b6b717b3aefdffe1a4ecf709bfa29aee5c71f954089ccf3b44fe51ce54d9744c"}) r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x2000b) perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0x28, 0x4, 0x8e, 0x5d, 0x0, 0x6f, 0x10c0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000001100), 0x2}, 0x1010, 0x40, 0x7, 0x7, 0x1f, 0x9, 0x5, 0x0, 0xbbf, 0x0, 0x6}, r3, 0x8, 0xffffffffffffffff, 0x9) [ 1045.010039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.030295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.060026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.061676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.363546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.365196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:32:15 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x2}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:32:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) (fail_nth: 7) 20:32:15 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x16}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:32:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0, 0xf0ff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:32:15 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x2) r1 = memfd_create(&(0x7f0000001b80)='(\xe8\xf5\x82j\xca', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fff}) 20:32:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x4) 20:32:15 executing program 2: pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000009c0)='wg0\x00', 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:32:15 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(0x0, 0x0) [ 1054.429459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.461366] loop6: detected capacity change from 0 to 4096 [ 1054.467849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:32:15 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1054.493364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.520010] FAULT_INJECTION: forcing a failure. [ 1054.520010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.521771] CPU: 0 UID: 0 PID: 9519 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1054.521811] Tainted: [W]=WARN [ 1054.521820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.521833] Call Trace: [ 1054.521841] [ 1054.521850] dump_stack_lvl+0xfa/0x120 [ 1054.521885] should_fail_ex+0x4d7/0x5e0 [ 1054.521927] strncpy_from_user+0x3b/0x2f0 [ 1054.521961] getname_flags.part.0+0x8d/0x540 [ 1054.521993] getname_flags+0x95/0xe0 [ 1054.522026] path_setxattrat+0x25d/0x290 [ 1054.522060] ? __pfx_path_setxattrat+0x10/0x10 [ 1054.522098] ? lock_release+0xc8/0x290 [ 1054.522127] ? __mutex_unlock_slowpath+0x157/0x750 [ 1054.522154] ? kernel_write+0x5f3/0x660 [ 1054.522192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1054.522223] ? __fget_files+0x20d/0x3b0 [ 1054.522261] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1054.522300] ? fput+0x6a/0x100 [ 1054.522322] ? ksys_write+0x1a3/0x240 [ 1054.522355] ? __pfx_ksys_write+0x10/0x10 [ 1054.522394] __x64_sys_lsetxattr+0xc9/0x140 [ 1054.522428] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1054.522465] do_syscall_64+0xbf/0x360 [ 1054.522497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.522520] RIP: 0033:0x7f300e6d2b19 [ 1054.522538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.522560] RSP: 002b:00007f300bc48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1054.522583] RAX: ffffffffffffffda RBX: 00007f300e7e5f60 RCX: 00007f300e6d2b19 [ 1054.522599] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000040 [ 1054.522614] RBP: 00007f300bc481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.522628] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 1054.522643] R13: 00007fff7b93164f R14: 00007f300bc48300 R15: 0000000000022000 [ 1054.522672] 20:32:15 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(0x0, 0x0) 20:32:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x8) 20:32:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) (fail_nth: 8) [ 1054.679582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:32:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0, 0x7ffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1054.761444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:32:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x18) [ 1054.777404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:32:15 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x2) r1 = memfd_create(&(0x7f0000001b80)='(\xe8\xf5\x82j\xca', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fff}) 20:32:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000ffff110e000008000300", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe4, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tun_tap_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_mac_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000001}, 0x40082) 20:32:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x300) [ 1054.962387] FAULT_INJECTION: forcing a failure. [ 1054.962387] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.964409] CPU: 0 UID: 0 PID: 9539 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1054.964470] Tainted: [W]=WARN [ 1054.964483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.964505] Call Trace: [ 1054.964518] [ 1054.964533] dump_stack_lvl+0xfa/0x120 [ 1054.964584] should_fail_ex+0x4d7/0x5e0 [ 1054.964651] should_failslab+0xc2/0x120 [ 1054.964700] kmem_cache_alloc_lru_noprof+0x73/0x3c0 [ 1054.964739] ? __d_alloc+0x31/0xa10 [ 1054.964786] __d_alloc+0x31/0xa10 [ 1054.964823] ? find_held_lock+0x2b/0x80 [ 1054.964864] d_alloc_parallel+0x112/0x1330 [ 1054.964897] ? __is_insn_slot_addr+0x140/0x290 [ 1054.964940] ? register_lock_class+0x41/0x560 [ 1054.964968] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1054.964995] ? perf_trace_lock+0xb5/0x5d0 [ 1054.965026] ? lockdep_init_map_type+0x4b/0x240 [ 1054.965056] ? lockdep_init_map_type+0x4b/0x240 [ 1054.965092] __lookup_slow+0x192/0x480 [ 1054.965123] ? __pfx___lookup_slow+0x10/0x10 [ 1054.965177] ? lookup_fast+0x14f/0x5e0 [ 1054.965228] walk_component+0x348/0x5b0 [ 1054.965265] path_lookupat+0x143/0x6c0 [ 1054.965304] filename_lookup+0x20f/0x5e0 [ 1054.965343] ? __pfx_filename_lookup+0x10/0x10 [ 1054.965384] ? __pfx_perf_trace_lock+0x10/0x10 [ 1054.965418] ? lock_acquire+0x15e/0x2f0 [ 1054.965443] ? __virt_addr_valid+0x1c6/0x5d0 [ 1054.965483] ? find_held_lock+0x2b/0x80 [ 1054.965517] ? __virt_addr_valid+0x2e8/0x5d0 [ 1054.965564] ? __virt_addr_valid+0x100/0x5d0 [ 1054.965604] ? __check_object_size+0x57b/0x880 [ 1054.965643] filename_setxattr+0x89/0x1c0 [ 1054.965681] ? __pfx_filename_setxattr+0x10/0x10 [ 1054.965718] ? getname_flags.part.0+0x1c6/0x540 [ 1054.965755] path_setxattrat+0x1cc/0x290 [ 1054.965791] ? __pfx_path_setxattrat+0x10/0x10 [ 1054.965833] ? lock_release+0xc8/0x290 [ 1054.965864] ? __mutex_unlock_slowpath+0x157/0x750 [ 1054.965894] ? kernel_write+0x5f3/0x660 [ 1054.965935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1054.965970] ? __fget_files+0x20d/0x3b0 [ 1054.966013] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1054.966052] ? fput+0x6a/0x100 [ 1054.966077] ? ksys_write+0x1a3/0x240 [ 1054.966113] ? __pfx_ksys_write+0x10/0x10 [ 1054.966156] __x64_sys_lsetxattr+0xc9/0x140 [ 1054.966193] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1054.966234] do_syscall_64+0xbf/0x360 [ 1054.966269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.966294] RIP: 0033:0x7f300e6d2b19 [ 1054.966314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.966338] RSP: 002b:00007f300bc48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1054.966361] RAX: ffffffffffffffda RBX: 00007f300e7e5f60 RCX: 00007f300e6d2b19 [ 1054.966379] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000040 [ 1054.966394] RBP: 00007f300bc481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.966410] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 1054.966425] R13: 00007fff7b93164f R14: 00007f300bc48300 R15: 0000000000022000 [ 1054.966461] 20:32:16 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x17}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) [ 1055.155335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.792108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1057.795824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1057.799295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1057.803121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1057.805912] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1059.881838] Bluetooth: hci4: command tx timeout [ 1061.930422] Bluetooth: hci4: command tx timeout [ 1063.977757] Bluetooth: hci4: command tx timeout [ 1066.026782] Bluetooth: hci4: command tx timeout [ 1074.184922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.186329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.256201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.257619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.352915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1074.658347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:32:45 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(0x0, 0x0) 20:32:45 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x18}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:32:45 executing program 2: chdir(&(0x7f00000000c0)='./file0\x00') r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40100, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$TIOCCBRK(r2, 0x5428) 20:32:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0, 0x7ffffffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:32:45 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x3}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:32:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) (fail_nth: 9) 20:32:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x46800, 0x0) 20:32:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x1800) [ 1084.602385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.616030] loop6: detected capacity change from 0 to 4096 [ 1084.639507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:32:45 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:32:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xcaa9a3ee2ebabb57}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0xfffffffffffffed6, 0x0}, 0x10) [ 1084.651465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:32:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x8, 0x0, 0x80, 0x8, 0x0, 0xfff, 0x118, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0xc2cb}, 0x4a220, 0x400, 0x1f, 0x6, 0x7f4, 0x80000000, 0x1, 0x0, 0x8}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 1084.666332] FAULT_INJECTION: forcing a failure. [ 1084.666332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.668288] CPU: 1 UID: 0 PID: 10027 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1084.668325] Tainted: [W]=WARN [ 1084.668332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1084.668346] Call Trace: [ 1084.668353] [ 1084.668362] dump_stack_lvl+0xfa/0x120 [ 1084.668397] should_fail_ex+0x4d7/0x5e0 [ 1084.668436] _copy_from_user+0x30/0xd0 [ 1084.668460] kstrtouint_from_user+0xbd/0x180 [ 1084.668489] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1084.668518] ? __lock_acquire+0xc65/0x1b70 [ 1084.668557] proc_fail_nth_write+0x7b/0x220 [ 1084.668592] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1084.668630] ? lock_is_held_type+0x9e/0x120 [ 1084.668660] vfs_write+0x2b7/0x1150 [ 1084.668698] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1084.668736] ? __pfx_vfs_write+0x10/0x10 [ 1084.668770] ? lock_release+0xc8/0x290 [ 1084.668797] ? __fget_files+0x20d/0x3b0 [ 1084.668838] ksys_write+0x121/0x240 [ 1084.668869] ? __pfx_ksys_write+0x10/0x10 [ 1084.668911] do_syscall_64+0xbf/0x360 [ 1084.668941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.668964] RIP: 0033:0x7f300e6855ff [ 1084.668982] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1084.669005] RSP: 002b:00007f300bc48170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1084.669027] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f300e6855ff [ 1084.669043] RDX: 0000000000000001 RSI: 00007f300bc481e0 RDI: 0000000000000003 [ 1084.669057] RBP: 00007f300bc481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1084.669071] R10: 0000000000000014 R11: 0000000000000293 R12: 0000000000000001 [ 1084.669085] R13: 00007fff7b93164f R14: 00007f300bc48300 R15: 0000000000022000 [ 1084.669116] [ 1084.737650] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.910615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.950366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:32:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x2000) 20:32:54 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:32:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x13, 0x0, "fbe4c38fab9581c35914da678464e30e7b94913fcc961721ebef9195a339256e176a8a7369aea56f32cb8e41049c555c8a6fad19a9a551e70a4d64a88d249735ca34d3f4ad120552d0448eed2f9701d2"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x46, 0x0, "697a6a8df98794657aa342de5165a671ae6ef576992b6c9452b1bc2d8191697abe68c70b61bcf3b11789f7221809b4d497aa4a83b6e9801e3f6d83a30cba71318adfcd06f5b1c829c71bc870d18c33c3"}, 0xd8) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) write(r2, &(0x7f0000000140)="b1268a0bbb99334301103a469552319dab9e93f09f17e6e318b977b692a337d4c090335f8c82efe82c4495071ba5e7e0cd96fecf26113da7f85985133ac41c075883f76b0786a541f862b49520495406376bd670de78166c5f4a39f9c7d61e8f51cb7e09b7d23be2d57a631fb1864c7f82bec02214dcac77a82d12bc9da2c64dfb29920654867db63ceb477dae24191f8af4411b72e17ade80e929ee007b55fa63c59347d70b4d990c974c6bf162efaed19b7485f3ea63c592187f6e6a0e10dbb239fc17db2b84628eaa8d6b126fdd83c65e12ec37e2dedd6bbfcefd35ac249f0439dbcc216a150f77", 0xe9) dup3(r1, r0, 0x0) 20:32:54 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x19}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:32:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0, 0x8000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:32:54 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x3, 0x7f, 0x0, 0x0, 0x4b, 0x14, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x26, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x4200, 0x9, 0x8, 0x6, 0x6, 0x3, 0x4c, 0x0, 0x10000, 0x0, 0x9}, r1, 0xffffffffffffffff, r0, 0x2) r3 = dup2(r2, r2) openat$incfs(r3, &(0x7f0000000200)='.pending_reads\x00', 0x400a02, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x8, 0x1, 0x3, 0x8, 0x0, 0x9, 0x2406, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x20, 0xfff, 0x9, 0x7, 0x6, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9}, r4, 0xf, r5, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000380)={0x5, 0x3, 0x401, 0x8, 0x2, 0x40}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) preadv2(r3, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/168, 0xa8}], 0x1, 0xbe4, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 20:32:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:32:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) [ 1093.611217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.618521] loop6: detected capacity change from 0 to 4096 [ 1093.637228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.638569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1093.681137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:32:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x1000000}, 0x14, 0x0) 20:32:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x3f00) 20:32:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$TIOCCONS(r0, 0x541d) 20:32:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0, 0xf0ff7f00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:32:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:32:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000002}, 0x14, 0x0) 20:32:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0, 0x8000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1093.845559] loop6: detected capacity change from 0 to 4096 [ 1093.859350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:32:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:32:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x4000) [ 1093.907877] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:32:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000004}, 0x14, 0x0) [ 1093.915084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.960016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.984931] loop6: detected capacity change from 0 to 4096 [ 1094.005634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1094.033870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0, 0x8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:33:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000006}, 0x14, 0x0) 20:33:05 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="04002cbd7000ffdb952199c70ab88f273e0906df25010000000000040000000bef19df3ff7c7136574683a6261746100"/57], 0x34}}, 0x40000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000007c0)={{0x6, 0x1}, 0x100, './file0\x00'}) read$rfkill(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000005c0)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x114, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="eb3f9099af8be51cc8ff58d2b6ea8c5abb017ed2034ab7ce721b2581a5faec24"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f6f25eee49eaa59b2b196d414227c23"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7913df4a8a04ef05"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aa3d66dddb8954e22edd2cb57684a3bfb440696888c6cfcde1ccd04eb397c8fb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5953b9a60df815a5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="649661f63de11f0924f8073481f961a25188b1a022c7e38b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2965dcd875bcbb966af61669f4c229ff"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "65e86531018dd42d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="357de076b0054de06d2f60a11c40db7bbab4329465bfc1d1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e4d82661c8c2f4245a3a0b9a9f52d4ae"}]}]}, 0x114}}, 0x0) 20:33:05 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:33:05 executing program 3: r0 = inotify_init1(0x80000) r1 = dup(r0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000040)="d4197ccf0cbf584167ad0daee9c67a2c65759420e08ecbda468605198dbe9b19dc9079fe6f448e3f0796a478df59bb0ed945f3aa7965b3bff55e0c81a1619f62201d2fb14e01ee00b6c91d3bfc83d8b194908a9ab42c5b966730cbdad69a287d473786f4e2e250a57d7ce5ab3c3309f07e97b339b932a9d8a9d62b9b7e0e40c91f7f73e252a1bdc11b934e7d11eef30a91403830ff746d5606a1c1bdf397bc1a4e91eb6612a009de9386f8ffec06934166d6c71cf5ee3dbc892adfda1491cb2d3c88a8053aa1da606f88869b42b045f95202d463211e32d89096428c77168dbec4841bcb5ef4d665deedb86e99d7497394718252a4df0d0c3e9cf50042f6fe8b") r2 = inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x40) inotify_rm_watch(r1, r2) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.swap.events\x00', 0x0, 0x0) mq_getsetattr(r3, &(0x7f0000000180)={0x1, 0xfffffffffffffc07, 0x10000, 0x2}, &(0x7f00000001c0)) 20:33:05 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1a}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:05 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x2}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x10040) [ 1104.121341] loop6: detected capacity change from 0 to 4096 [ 1104.123126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.125883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.165545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:33:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x80000) 20:33:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0, 0x80000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1104.321475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000008}, 0x14, 0x0) 20:33:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x200000) 20:33:05 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9}, 0x9, 0x7fffffff}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) [ 1104.435444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.436536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:33:14 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:33:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x1000000) 20:33:14 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:33:14 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1b}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:14 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x3}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0, 0xf0ff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:33:14 executing program 3: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000580)={r0, "01f1fb8cb7383e167f72c7f8c163b20d"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) r1 = eventfd2(0x1, 0x801) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"37513d05c4bb5bda31f979ff1cec47b2", 0x0, 0x0, {0x8, 0x8001}, {0x1}, 0x4, [0x6, 0x5, 0x8, 0x8, 0x4, 0xf2, 0x100000000, 0x7518, 0x6, 0x480000000, 0x3, 0x6, 0x3, 0x10000, 0x80, 0xbc84]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001680)={{r1}, r2, 0x4, @unused=[0x0, 0xffffffff, 0xd03], @subvolid=0x2}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) fsync(r4) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x4c01, 0x0) 20:33:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000014}, 0x14, 0x0) [ 1113.838039] loop6: detected capacity change from 0 to 4096 [ 1113.863197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.876748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.880368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.903775] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000600}, 0x14, 0x0) 20:33:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0, 0x7ffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1113.962294] loop6: detected capacity change from 0 to 4096 20:33:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x2000000) [ 1114.005564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:33:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_dev$vcsa(&(0x7f0000000180), 0x6, 0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x20, 0xad, 0x7f, 0xf6, 0x0, 0x9, 0x2001, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x2120, 0x2, 0x8, 0x7, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x8}, r0, 0x6, r1, 0x0) r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x2000b) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x40, 0xfe, 0x1, 0x0, 0x7, 0x240, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x2, @perf_config_ext={0x2, 0x1}, 0x200, 0x3f, 0x4dc06524, 0x2, 0xffff, 0x7be, 0x1000, 0x0, 0x4c1, 0x0, 0x9}, r2, 0x9, 0xffffffffffffffff, 0xa) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0xfb, 0x6, 0x0, 0x0, 0x0, 0x1000, 0x1d, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0xb772bc5cb09b7c2a, @perf_bp={&(0x7f00000000c0), 0x2}, 0x10480, 0x3a32, 0xab0, 0x3, 0xfffffffffffffffb, 0x1, 0x1e7, 0x0, 0x8000, 0x0, 0x4}, r0, 0x9, r4, 0xa) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:33:15 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1114.035539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:15 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0xb998d44be74d5b50, 0x0, 0x0, 0x0, 0x0, 0x401, 0x49fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 20:33:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2001400}, 0x14, 0x0) [ 1114.078382] loop6: detected capacity change from 0 to 4096 [ 1114.090446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.121267] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2002000}, 0x14, 0x0) 20:33:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0, 0x7ffffffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1114.188669] loop6: detected capacity change from 0 to 4096 [ 1114.212137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.220540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:33:15 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@empty, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:33:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x3000000) [ 1114.267058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.421392] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:24 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) sendfile(r0, r1, 0x0, 0x5a65) 20:33:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x2000000) 20:33:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x4000000) 20:33:24 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:24 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1c}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0, 0x8000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:33:24 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:33:24 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2003f00}, 0x14, 0x0) [ 1123.702962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:33:24 executing program 3: r0 = semget(0x3, 0x4, 0x400) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x212) semctl$IPC_RMID(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010300)='\x00', 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000000640)=ANY=[]) r2 = semget(0x3, 0x3, 0x110) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000040)) [ 1123.754032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1123.756808] loop6: detected capacity change from 0 to 4096 20:33:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x18000000) [ 1123.802283] loop3: detected capacity change from 0 to 2048 [ 1123.805203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:33:24 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1123.850735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.861347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:24 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x200ff0f}, 0x14, 0x0) 20:33:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0, 0xf0ff7f00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1123.942495] loop6: detected capacity change from 0 to 4096 [ 1123.972031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.005992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.041324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.058877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.104367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:33:34 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:33:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x3000000}, 0x14, 0x0) 20:33:34 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1d}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x3f000000) 20:33:34 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:33:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000180)='ext4\x00', 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000380)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x7}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f00000001c0)="ed41000000080000d0f474ef851f32fa5300f7878e883d8a655fd2f4655fd2d5655f", 0x22, 0x200}], 0x2, &(0x7f0000013c00)) [ 1133.732357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.738778] loop6: detected capacity change from 0 to 4096 [ 1133.743150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.744215] loop3: detected capacity change from 0 to 512 [ 1133.764123] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1133.768820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:33:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:33:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x40000000) [ 1133.831411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:34 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a08020000010000010100535007", 0x25, 0xb800}], 0x1001d64, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16=r0]) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)="11b274e90dda4b34917edd8491941f5a7094f105e7065fbd925138d87ea5475683ef6adfbdc6e4ab823db6b29eee349c740e6d509e627c07f00cbb8f40850256727c8443149e3ba8d535ed6c7b78d6a997fb71999dc4", 0x56, 0x1) socket$packet(0x11, 0x3, 0x300) symlinkat(&(0x7f00000005c0)='./file0\x00', r1, &(0x7f0000000600)='./file0\x00') 20:33:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0xf000000}, 0x14, 0x0) 20:33:34 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:33:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0, 0x8}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:33:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x10000000}, 0x14, 0x0) [ 1133.933312] loop3: detected capacity change from 0 to 184 20:33:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x20000000}, 0x14, 0x0) [ 1133.996414] loop3: detected capacity change from 0 to 184 20:33:35 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x40000100) 20:33:35 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)) [ 1134.041594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1134.071407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:33:46 executing program 2: fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:33:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x8000000000000) 20:33:46 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:46 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:33:46 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c000000000801010000000000000000070000013c0004ff080005400000000908000640000000060800044000000000ed34190c388106ae080005400000007508000640000000630800014080000000050003002f00000006000240600100801c00046908000140000046b2a63d28ede6e7ffe15c9b0005080001401be9cda020d0b5232e1f22e137b7f23110bbc8c4617023ab53bada15dedb5317125ec901bd641fb30f548385832f1ae6614d3e7782f0eb0149eab5d397e07a303ec4fc7ff5"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8002, 0x67) r2 = dup2(r1, r0) dup2(r2, r1) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) fdatasync(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ftruncate(r3, 0x3) pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) 20:33:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) 20:33:46 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1e}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0, 0x80000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1145.099293] loop6: detected capacity change from 0 to 4096 [ 1145.115583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1145.117111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1145.130653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:33:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x2}]}, 0x14, 0x0) [ 1145.186926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x20000000000000) 20:33:46 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:33:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0, 0xf0ff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:33:46 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:33:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x100000000000000) 20:33:46 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c000000000801010000000000000000070000013c0004ff080005400000000908000640000000060800044000000000ed34190c388106ae080005400000007508000640000000630800014080000000050003002f00000006000240600100801c00046908000140000046b2a63d28ede6e7ffe15c9b0005080001401be9cda020d0b5232e1f22e137b7f23110bbc8c4617023ab53bada15dedb5317125ec901bd641fb30f548385832f1ae6614d3e7782f0eb0149eab5d397e07a303ec4fc7ff5"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8002, 0x67) r2 = dup2(r1, r0) dup2(r2, r1) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) fdatasync(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ftruncate(r3, 0x3) pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) 20:33:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x4}]}, 0x14, 0x0) 20:33:46 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x280801, 0x18a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffd, 0xfc, 0x9, @scatter={0x4, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/34, 0x22}, {&(0x7f0000000240)=""/143, 0x8f}]}, &(0x7f0000000340)="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", &(0x7f0000000440)=""/61, 0x6, 0x10, 0xffffffffffffffff, &(0x7f0000000480)}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:33:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x200000000000000) [ 1145.433829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1145.435662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1145.439908] loop6: detected capacity change from 0 to 4096 [ 1145.476115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1145.555540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:55 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x21}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x301040, 0x0) 20:33:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0, 0x7ffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:33:55 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:33:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/1, 0x1}, {0x0}], 0x2) 20:33:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x6}]}, 0x14, 0x0) 20:33:55 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x300000000000000) 20:33:55 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (fail_nth: 1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1154.769620] FAULT_INJECTION: forcing a failure. [ 1154.769620] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.771386] CPU: 0 UID: 0 PID: 10376 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1154.771424] Tainted: [W]=WARN [ 1154.771432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1154.771446] Call Trace: [ 1154.771454] [ 1154.771464] dump_stack_lvl+0xfa/0x120 [ 1154.771500] should_fail_ex+0x4d7/0x5e0 [ 1154.771541] ? getname_flags.part.0+0x48/0x540 [ 1154.771567] should_failslab+0xc2/0x120 [ 1154.771604] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 1154.771639] ? fput+0x6a/0x100 [ 1154.771664] getname_flags.part.0+0x48/0x540 [ 1154.771699] getname_flags+0x95/0xe0 [ 1154.771731] __x64_sys_mkdirat+0x77/0xb0 [ 1154.771765] do_syscall_64+0xbf/0x360 [ 1154.771795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.771819] RIP: 0033:0x7f758e286b19 [ 1154.771836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1154.771859] RSP: 002b:00007f758b7fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1154.771882] RAX: ffffffffffffffda RBX: 00007f758e399f60 RCX: 00007f758e286b19 [ 1154.771898] RDX: 00000000000001ff RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1154.771913] RBP: 00007f758b7fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.771927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.771941] R13: 00007ffc44ed0d5f R14: 00007f758b7fc300 R15: 0000000000022000 [ 1154.771970] [ 1154.795003] loop6: detected capacity change from 0 to 4096 [ 1154.804090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.806332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.839163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:33:55 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x400000000000000) 20:33:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x7f, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffbfffff, r0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0xffffffff) 20:33:56 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x8}]}, 0x14, 0x0) 20:33:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0, 0x7ffffffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1154.968543] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:33:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x1800000000000000) 20:33:56 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (fail_nth: 2) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:33:56 executing program 3: sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB="bb11b7641e99c2a987c2927e60beedb3dfee4f9904b60e4fb539a64e60d0f467ec57ea382a492e2218161de5e972a1a28fd2a3b79256ae068badd81e08d5b29a5686b8bc087a2dea4569a4067820ab38a82a8c4cf33ecde4c7cf34efc3d63f0c92072543064c40b176e8a6bc623066dcd97922a9c510d33e4c893994944148ca95ea3eb2cc", @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x20048800) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc186e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d5350b0b895f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df662efc5db431fb58173717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff12a476c693ea71f7be47a508c98eddc479eb703d6f178100000000000000a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064ff07363a4c45bc4b5fc77b81c1b7d82700f508e7485bfcf1facea6f5763bb13023aed4cd7ff200554cb5d3307dfc43e8fc49878f7ac27e2226a48d87471708d036d5448c20207731438839301058c114dce8bd59355705c1d94d99aa6a2a394a94ddd456c3b66ea43e84253bab73e0699ea6778861b1cf71ce86ffe512", 0x2bf) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) write(r3, &(0x7f0000000140)="e26865b60567d2b61cba9c62256716327570ca59e31610d78aeba17dfab78ba6de930c47b236cd0b48b2c1cd8b6525a19ca1b70e3bcc6efc1f3113", 0x3b) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x5, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r4, 0x0, 0xfdef) [ 1155.067456] loop6: detected capacity change from 0 to 4096 [ 1155.110549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.118140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.135896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1155.285467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:34:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x40b00, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 20:34:04 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:34:04 executing program 3: sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB="bb11b7641e99c2a987c2927e60beedb3dfee4f9904b60e4fb539a64e60d0f467ec57ea382a492e2218161de5e972a1a28fd2a3b79256ae068badd81e08d5b29a5686b8bc087a2dea4569a4067820ab38a82a8c4cf33ecde4c7cf34efc3d63f0c92072543064c40b176e8a6bc623066dcd97922a9c510d33e4c893994944148ca95ea3eb2cc", @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x20048800) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) write(r0, &(0x7f0000000900)="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", 0x2bf) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) write(r3, &(0x7f0000000140)="e26865b60567d2b61cba9c62256716327570ca59e31610d78aeba17dfab78ba6de930c47b236cd0b48b2c1cd8b6525a19ca1b70e3bcc6efc1f3113", 0x3b) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x5, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r4, 0x0, 0xfdef) 20:34:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (fail_nth: 3) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:34:04 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x22}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:34:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0, 0x8000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:34:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x14}]}, 0x14, 0x0) 20:34:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x3f00000000000000) [ 1163.919316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1163.943372] FAULT_INJECTION: forcing a failure. [ 1163.943372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.945758] CPU: 1 UID: 0 PID: 10430 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1163.945798] Tainted: [W]=WARN [ 1163.945806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1163.945821] Call Trace: [ 1163.945828] [ 1163.945838] dump_stack_lvl+0xfa/0x120 [ 1163.945873] should_fail_ex+0x4d7/0x5e0 [ 1163.945915] strncpy_from_user+0x3b/0x2f0 [ 1163.945950] getname_flags.part.0+0x8d/0x540 [ 1163.945982] getname_flags+0x95/0xe0 [ 1163.946016] __x64_sys_mkdirat+0x77/0xb0 [ 1163.946052] do_syscall_64+0xbf/0x360 [ 1163.946084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.946109] RIP: 0033:0x7f758e286b19 [ 1163.946128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1163.946152] RSP: 002b:00007f758b7fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1163.946176] RAX: ffffffffffffffda RBX: 00007f758e399f60 RCX: 00007f758e286b19 [ 1163.946193] RDX: 00000000000001ff RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1163.946209] RBP: 00007f758b7fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1163.946224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.946239] R13: 00007ffc44ed0d5f R14: 00007f758b7fc300 R15: 0000000000022000 [ 1163.946271] [ 1163.946614] loop6: detected capacity change from 0 to 4096 20:34:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0, 0xf0ff7f00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1164.019616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:34:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)) [ 1164.068577] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:34:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x4000000000000000) 20:34:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:34:05 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (fail_nth: 4) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:34:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x600}]}, 0x14, 0x0) [ 1164.198534] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.221428] FAULT_INJECTION: forcing a failure. [ 1164.221428] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.223328] CPU: 1 UID: 0 PID: 10453 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1164.223367] Tainted: [W]=WARN [ 1164.223376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1164.223390] Call Trace: [ 1164.223398] [ 1164.223408] dump_stack_lvl+0xfa/0x120 [ 1164.223445] should_fail_ex+0x4d7/0x5e0 [ 1164.223491] ? jbd2__journal_start+0x193/0x6b0 [ 1164.223520] should_failslab+0xc2/0x120 [ 1164.223562] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 1164.223596] ? lock_is_held_type+0x9e/0x120 [ 1164.223632] jbd2__journal_start+0x193/0x6b0 [ 1164.223668] __ext4_journal_start_sb+0x325/0x5d0 [ 1164.223715] ? ext4_dirty_inode+0xa5/0x130 [ 1164.223745] ext4_dirty_inode+0xa5/0x130 [ 1164.223769] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1164.223792] __mark_inode_dirty+0x1b7/0xd00 [ 1164.223838] generic_update_time+0xcb/0xf0 [ 1164.223882] touch_atime+0x4bd/0x590 [ 1164.223913] step_into+0x19fe/0x2030 [ 1164.223944] ? lock_is_held_type+0x9e/0x120 [ 1164.223978] ? __pfx_step_into+0x10/0x10 [ 1164.224017] ? lookup_fast+0x14f/0x5e0 [ 1164.224056] walk_component+0xf5/0x5b0 [ 1164.224092] link_path_walk+0x62b/0xe20 [ 1164.224140] path_parentat+0x2d/0x110 [ 1164.224174] __filename_parentat+0x210/0x660 [ 1164.224213] ? __pfx___filename_parentat+0x10/0x10 [ 1164.224246] ? __kernel_text_address+0xd/0x40 [ 1164.224274] ? unwind_get_return_address+0x59/0xa0 [ 1164.224332] ? perf_trace_lock+0xb5/0x5d0 [ 1164.224366] ? __pfx_perf_trace_lock+0x10/0x10 [ 1164.224406] filename_create+0xa4/0x480 [ 1164.224441] ? __pfx_filename_create+0x10/0x10 [ 1164.224480] ? __virt_addr_valid+0x100/0x5d0 [ 1164.224527] do_mkdirat+0x9a/0x3d0 [ 1164.224568] ? __pfx_do_mkdirat+0x10/0x10 [ 1164.224606] ? getname_flags.part.0+0x1c6/0x540 [ 1164.224643] __x64_sys_mkdirat+0x84/0xb0 [ 1164.224683] do_syscall_64+0xbf/0x360 [ 1164.224717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.224742] RIP: 0033:0x7f758e286b19 [ 1164.224760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1164.224785] RSP: 002b:00007f758b7fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1164.224809] RAX: ffffffffffffffda RBX: 00007f758e399f60 RCX: 00007f758e286b19 [ 1164.224826] RDX: 00000000000001ff RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1164.224842] RBP: 00007f758b7fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.224857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.224872] R13: 00007ffc44ed0d5f R14: 00007f758b7fc300 R15: 0000000000022000 [ 1164.224908] [ 1164.237008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:34:05 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1390c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x182, 0x0, 0x10, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) [ 1167.094523] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1167.097065] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1167.100083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1167.105452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1167.109111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1169.129852] Bluetooth: hci6: command tx timeout [ 1171.178912] Bluetooth: hci6: command tx timeout [ 1173.225822] Bluetooth: hci6: command tx timeout [ 1175.274774] Bluetooth: hci6: command tx timeout [ 1183.082934] Bluetooth: hci4: command 0x0406 tx timeout [ 1183.138464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.139595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.175846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.177320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.282404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.586788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:34:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0, 0x8}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:34:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x4000010000000000) 20:34:33 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:34:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)) 20:34:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x1400}]}, 0x14, 0x0) 20:34:33 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000)="8d", 0x1, 0xa42) unlink(&(0x7f00000002c0)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x50852, r1, 0x2829c000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:34:33 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (fail_nth: 5) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:34:33 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x23}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) [ 1192.822489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.869470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:34:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x87, 0x40, 0xda, 0x1, 0x0, 0x6, 0x18041, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x933, 0x4, 0x1, 0x7, 0x1, 0x1, 0x1f, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r0, 0x3) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) [ 1192.881642] loop6: detected capacity change from 0 to 4096 20:34:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0, 0x80000}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1192.924571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:34:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0xffffffff00000000) 20:34:34 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (fail_nth: 6) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:34:34 executing program 3: ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000100)={0xdc36, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000017c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xac, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f00000017c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100002100000427bd7000fedbdf2500000000000000000000000000000000ac1414380000000000000000000000004e2200034e2200000a00200021000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYBLOB="bf6b6e0000000000e4000600fc010000000000000000000000000001fe80000000000000000000800000001e4e24fbff4e20d52d0a00804032000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="fc020000000000000000000000000001000004d56c00000064010100000000000000000000000000800000000000000001010000000000003a0000000000000002000000000000000101000000000000000000000000000001000080000000000500000000000000010400000000000000fcffffffffffff0100000000000000090a000000000000070000003f0000000000000040000000003500000200011f51000000000000001c00288fec70eba14deb000000000000000000000000ffffffffffff"], 0x150}, 0x1, 0x0, 0x0, 0x20000040}, 0x30000100) perf_event_open(&(0x7f0000000480)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r7, 0x0, 0x0) bind$unix(r7, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) 20:34:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0, 0xf0ff7f}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1193.030257] FAULT_INJECTION: forcing a failure. [ 1193.030257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.031257] CPU: 0 UID: 0 PID: 10951 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250825 #1 PREEMPT(voluntary) [ 1193.031278] Tainted: [W]=WARN [ 1193.031282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1193.031290] Call Trace: [ 1193.031295] [ 1193.031300] dump_stack_lvl+0xfa/0x120 [ 1193.031321] should_fail_ex+0x4d7/0x5e0 [ 1193.031344] _copy_to_user+0x32/0xd0 [ 1193.031358] simple_read_from_buffer+0xe0/0x180 [ 1193.031376] proc_fail_nth_read+0x18a/0x240 [ 1193.031395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1193.031413] ? security_file_permission+0x22/0x90 [ 1193.031431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1193.031449] vfs_read+0x1eb/0xc70 [ 1193.031469] ? __pfx_vfs_read+0x10/0x10 [ 1193.031487] ? lock_release+0xc8/0x290 [ 1193.031503] ? __fget_files+0x20d/0x3b0 [ 1193.031525] ksys_read+0x121/0x240 [ 1193.031542] ? __pfx_ksys_read+0x10/0x10 [ 1193.031564] do_syscall_64+0xbf/0x360 [ 1193.031581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.031594] RIP: 0033:0x7f758e23969c [ 1193.031604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1193.031616] RSP: 002b:00007f758b7fc170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1193.031628] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f758e23969c [ 1193.031637] RDX: 000000000000000f RSI: 00007f758b7fc1e0 RDI: 0000000000000003 [ 1193.031644] RBP: 00007f758b7fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1193.031652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.031659] R13: 00007ffc44ed0d5f R14: 00007f758b7fc300 R15: 0000000000022000 [ 1193.031680] 20:34:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x2000}]}, 0x14, 0x0) 20:34:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, &(0x7f0000000080)={@private0}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 1193.055034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.127039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.158041] loop6: detected capacity change from 0 to 4096 [ 1193.182116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1193.194399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.236489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:34:42 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:34:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0, 0x7ffff000}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:34:42 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x24}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:34:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xb}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x404800d) 20:34:42 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:34:42 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x3f00}]}, 0x14, 0x0) 20:34:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x20, 0x9, 0xff, 0x1, 0x0, 0xfffffffffffffffa, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xffffffffffffffba, 0x7fffffff}, 0x21, 0x8, 0x9, 0x9, 0x4, 0x4, 0x3, 0x0, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x2000b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x3e, 0xc1, 0x3f, 0x0, 0x1, 0x20080, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x5, 0xdb}, 0x280, 0x9, 0xa51e, 0x3, 0x8, 0x7, 0x40, 0x0, 0x5, 0x0, 0x7}, r1, 0x5, 0xffffffffffffffff, 0x1) 20:34:42 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x5e5b9) read$rfkill(r2, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@noextend}, {@version_u}, {@access_any}, {@loose}, {@msize={'msize', 0x3d, 0x8}}], [{@audit}, {@hash}, {@uid_lt={'uid<', r3}}, {@appraise_type}, {@permit_directio}]}}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x1fe}) [ 1201.008520] loop6: detected capacity change from 0 to 4096 [ 1201.018397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.020141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.058163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:34:42 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000180)={0x1, [0x0]}) tgkill(r1, r2, 0x2000b) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x80, 0x0, 0x4, 0x1d, 0x0, 0xfffffffffffffffa, 0x40000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0xa}, 0x48, 0x6, 0xfffffff7, 0x8, 0x6, 0x7, 0x0, 0x0, 0x5, 0x0, 0x9}, r1, 0x9, r3, 0x3) 20:34:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0, 0x7ffffffff000}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:34:42 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x10, r0, 0x8000000) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd=r7, 0x100, 0x3, 0x4de1, 0xb, 0x0, {0x1}}, 0xffffffe1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x404c805) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r8, 0x0, 0x4) [ 1201.109362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:34:42 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xff0f}]}, 0x14, 0x0) 20:34:42 executing program 2: ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/17, 0x11}, {&(0x7f00000000c0)=""/194, 0xc2}, {&(0x7f00000001c0)=""/207, 0xcf}], 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:34:42 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0xffffffffffffffff, 0x20100) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000001c0)=[r0, r3, r1]}, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x23, 0x1, 0x1, 0xff, 0x101, 0x3, 0x3e, 0x7ff, 0x313, 0x38, 0x387, 0x3, 0x1000, 0x20, 0x1, 0x7, 0x2, 0xfffe}, [{0x2, 0xffffffe0, 0xd1b, 0x1, 0x4, 0x8, 0x1, 0xc5}], "6500fd73788e60f1664afa24e302ce58370d6cf2efcb6ef8e40a6c79d513a43d4f3066ce560a6f1dc79335bcd7314f5df465e2932b81966beb2cd1e6681695df05e89c68b4c504e77ec27bd58fab5842f2c3c040a5d34e03282bc1592e5b665bdf2436b1edf4c5f3178720389ffc7b9811477c21bb9cc650eb8393f555de8c39087a5083d632004b42a8cd6341f462e5f7f0ca9dcb9a358f695fc1a7271850ec", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8f8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:34:42 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x7ff7}, 0x2100, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0xfffffffffffff801, 0x4a0080) 20:34:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0xec4, 0x0) 20:34:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0, 0x8000000000000}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1201.327373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.332312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:34:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0, 0xf0ff7f00000000}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:34:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x80000}]}, 0x14, 0x0) 20:34:51 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_emit_ethernet(0x76, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60c770cc00403a0000000000000000000000000000000000ff020000000000000000000000000001030090790000000060ec3ba10000000000000000000000000000000000000001200100000000000000000000000000021100"/118], 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x14, 0x0, 0x3f, 0x80138, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000180), 0x6}, 0x1200, 0x5, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0xa) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:34:51 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read$rfkill(r2, &(0x7f0000000400), 0x8) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0x1, 0x1e, 0xb0, 0x0, 0x9, 0x1e21, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000380), 0xd}, 0x1200, 0x3, 0x878, 0x7, 0x1, 0x2, 0x9, 0x0, 0xd3b9, 0x0, 0x7}, 0xffffffffffffffff, 0x20000000000000c, r1, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000140)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$TCSBRK(r2, 0x5409, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r5, 0x810, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x8080) 20:34:51 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:34:51 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x25}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:34:51 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x10, r0, 0x8000000) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd=r7, 0x100, 0x3, 0x4de1, 0xb, 0x0, {0x1}}, 0xffffffe1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x404c805) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r8, 0x0, 0x4) 20:34:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xeb, 0x0, 0x0, 0x3, 0x0, 0x8000000000000000, 0x21300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x8) [ 1210.343148] loop6: detected capacity change from 0 to 4096 [ 1210.343184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.380109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:34:51 executing program 5: r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x2000b) sched_setattr(r1, &(0x7f0000000140)={0x38, 0x2, 0x51, 0x2, 0x8, 0xfffffffffffffffe, 0xf5b, 0x8001, 0x7, 0x9}, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="be6003098f9f47d51a88aea64849975b94281b1197263fc6383c53ca6bc4c6450ef9cee56fc9a4a3b81d75ea5061721e784f78663d87bb899d9db44334a0ca9b8cf078dee05abc1dc48998576a07582ef102e175ec7ae139db4141299f67c19a85f76a466c45a9a99306e398afe1f8e8ac282b2d6fbd6eb117450357a3ff5a82c18076ec5e0ab7e35154ddf0165a8ec93341964488812aa6f7fcf7226ae92581594582a57a7620bff6", 0xa9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1210.400549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:34:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:34:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x200000}]}, 0x14, 0x0) [ 1210.527527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:34:51 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:34:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x810, r0, 0x48b65000) r1 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) sendfile(r1, r2, &(0x7f0000000080)=0x6, 0x5) [ 1210.642271] loop6: detected capacity change from 0 to 4096 [ 1210.649422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:34:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x8}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1210.695069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1210.695261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:34:51 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x26}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:34:51 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:34:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1210.783134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.822486] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.854062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1211.089904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1211.176115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:34:59 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ehci_pci', 0x0, 0x2) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @random="a16acdf8b887"}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000017c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x81, 0x1, 0x401, 0x3a78, 0x8001, 0x3fc, 0x1}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:34:59 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x2}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:34:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x1000000}]}, 0x14, 0x0) 20:34:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0, 0x7ffff000}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:34:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x80000}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:34:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:34:59 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:34:59 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x60}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) [ 1218.773952] loop6: detected capacity change from 0 to 4096 [ 1218.792550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.793808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.798086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:34:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x1, 0x0, 0xa1, 0x0, 0x0, 0xa010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40, 0xffffffffffffffff, 0xa) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r0 = clone3(&(0x7f00000003c0)={0x20100000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x36}, &(0x7f0000000200)=""/217, 0xd9, &(0x7f0000000300)=""/126, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}, 0x58) r2 = getpgrp(0x0) perf_event_open(&(0x7f00000009c0)={0x0, 0x80, 0x81, 0x1f, 0x6, 0x5, 0x0, 0x4, 0x2470, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x6, @perf_bp={&(0x7f0000000880), 0xa}, 0x8200, 0x8efe, 0x40, 0x8, 0x3, 0x7, 0x8, 0x0, 0x4, 0x0, 0x4}, r0, 0x8, 0xffffffffffffffff, 0x1) r3 = gettid() tgkill(r2, r3, 0x2000b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)=0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0), {0x14}, &(0x7f0000000500)=""/36, 0x24, &(0x7f0000000540)=""/101, &(0x7f0000000600)=[r3, r4, r1, r1, r1, r1], 0x6}, 0x58) r6 = gettid() tgkill(0x0, r6, 0x2000b) r7 = getpgrp(0x0) r8 = gettid() tgkill(r7, r8, 0x2000b) r9 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r9, 0x0, 0x0) clone3(&(0x7f0000000940)={0x20010000, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740), {0x2}, &(0x7f0000000780)=""/199, 0xc7, &(0x7f0000000c40)=""/4096, &(0x7f0000000900)=[0x0, r2, 0x0, r1, 0x0, r5, 0x0, 0x0, r6, r7], 0xa, {r9}}, 0x58) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r10, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x40, 0x0, 0x0, 0xa8, 0x0, 0x401, 0x830d0, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x6, @perf_bp={&(0x7f0000000080)}, 0x6420, 0x2, 0x10000, 0x1, 0x5, 0x8000, 0x1, 0x0, 0xb92}, r1, 0xb, r10, 0x1) 20:34:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x200000}]}, 0x14, 0x0) [ 1218.887813] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:34:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xf0ff7f}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:34:59 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0xfffffffffffff6d2, 0x9d1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:34:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x2000000}]}, 0x14, 0x0) [ 1218.919330] loop3: detected capacity change from 0 to 4096 [ 1218.951587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.985641] loop6: detected capacity change from 0 to 4096 [ 1219.000379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1219.038186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.082342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.106468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1219.108191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:35:09 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x5e5b9) read$rfkill(r2, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@noextend}, {@version_u}, {@access_any}, {@loose}, {@msize={'msize', 0x3d, 0x8}}], [{@audit}, {@hash}, {@uid_lt={'uid<', r3}}, {@appraise_type}, {@permit_directio}]}}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x1fe}) 20:35:09 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) pwritev2(r0, &(0x7f0000000640)=[{&(0x7f0000000180)="dcfa8c01a0e28326f5ecb15572a107214ee99b3c8470bb09f389be9706dc935ed46e48de7efff340aed0ea34d1625886c9ee43b2dfa7d3dfab4041b71c86", 0x3e}, {&(0x7f00000001c0)="9bbcdebbfc94e9b4d44cc2db4a120d9eedf3e01800fd371befe02a52380bb83f5ca147d4732cbf5aa477df", 0x2b}, {&(0x7f00000004c0)="dabf88311d15bbc2d80a1b0f9c9c26bef425c40aaa5bbaa268c3b302dd773a7f4a722ccec0831f0c6479dc6cfe26543f68bc80042027d1e74fbce7f10dad485cd5a923c3b9127ea561f1373ea5ed53c86390ecd7ff1a7bdfb28a2b8b1ec97cc953594271ace08a9987a31d42fb5212e62082b7d7f3ec44ac75c5860a31beda2e4be6473e9200c68e35e7f9d521bc216cfa6c2d39813cd93078f0b57cf230bc583bb15589edf2062c7e4bd8ef7faea9ae73133eb40a34687a2782c99c62d5550cf92d2b78b8fc469229fc86013a91c5c73a19f56fda1ecbd4a5c51456d6", 0xdd}, {&(0x7f00000002c0)="16efdf61c1c53abe0fbf447fa404cd0ed34e44c142e4402bbf90494a4685315c426a2d51673aecfb4cf7f9a1f277865f59fb7b25f86e013f55cd60fa9bd5a5a00e77fcf70bf59e6270cb04a865c26f2a4ae83dc6034fec7fce0ca1f5bdea96ddb80a09b5a44503924cf455f1399ed0", 0x6f}, {&(0x7f00000005c0)="8a6791b8df5dead4e7daebe9285875b5b3cc2a2422cd1f2bdbe11fd6b73e1e14b566ba6822deb159431597fcb775fa025013aa6455a29b261ebd3bf129007ebfda722990a56f81bf", 0x48}, {&(0x7f0000000200)="f3b42a761732abe6a62419", 0xb}, {&(0x7f00000003c0)="584bd0aa65476c985fb04ecd7f773c34ccc29b9218cf26dd0f9bb948badd389a222c3c5bcca1be1634778ac6e190b839ff40dc98041e", 0x36}, {&(0x7f0000000440)="8c9c0005", 0x4}], 0x8, 0x22a0, 0x9, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:35:09 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r3, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xffff}) read$rfkill(r4, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x4d277) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r6 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x2}}, './file1\x00'}) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xb0a) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x7fffffff, 0x6, 0x4}) 20:35:09 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0xf0}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x4000000}]}, 0x14, 0x0) 20:35:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x7ffff000}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:35:09 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x3}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:09 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1f, 0xad, 0x80, 0x0, 0x0, 0xffff, 0x2300, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2000200, 0x4, @perf_bp={&(0x7f00000000c0), 0x3}, 0x40002, 0x7e0a, 0x3, 0x5, 0x0, 0x7, 0x8, 0x0, 0xf42, 0x0, 0x4}, r1, 0xffffffffffffffff, r0, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 1228.721355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.723663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.725574] loop6: detected capacity change from 0 to 4096 [ 1228.744254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:35:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x6000000}]}, 0x14, 0x0) 20:35:09 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1f, 0x6, 0x81, 0x6, 0x0, 0x1f, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x6}, 0x4400, 0x4b6b, 0x2, 0x5, 0x2, 0x4, 0x2, 0x0, 0x6}, r1, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f00000001c0)="6e6904c3f78989e9d72232a03c1d6102ed2813dcaf016f083d746aacfeeb19faefba6f47a6dfb2d6ac4306a82bb947d0feb531992b62b565152298eec304e67239400470eccb8879a2c1e8b9f8b5cb4b5122368d7aa160cbde8d00389099dccafcd09fa5e8df7cd1dc2786dc65236c57935e472ccece41e71cf9f6917474b2f65df7c7b926b1d707b80d55b679ae17b9f3236f22c2e214d92d708deaf78d2d4e66664773a6de14e365deb13df83f2776731c0e883ff3ff4b36b9ab1088a66ce3cb0b30047cd0793631565ceba2ca26fea81873e696fa9c7ce86fa821983aeabbb13b13aeaf75f55cf1a13fb67763a7f6", 0xf0, 0x5, 0x0, 0x2}]) [ 1228.810392] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:35:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x7ffffffff000}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:35:09 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x5e5b9) read$rfkill(r2, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@noextend}, {@version_u}, {@access_any}, {@loose}, {@msize={'msize', 0x3d, 0x8}}], [{@audit}, {@hash}, {@uid_lt={'uid<', r3}}, {@appraise_type}, {@permit_directio}]}}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x1fe}) [ 1228.938454] loop6: detected capacity change from 0 to 4096 [ 1228.973141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:35:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x8000000000000}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1229.033658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1229.041073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:35:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x14000000}]}, 0x14, 0x0) 20:35:10 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0xac2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0xbc, 0x57, 0x4fa8db04, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x47, 0x98, 0x6}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x47}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) flock(r3, 0x5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040", 0x1f, 0x10001}, {&(0x7f0000010400)="020000000300000000000000000000000f00c5d700"/32, 0x20, 0x1000}, {&(0x7f00000005c0)="ed41000000100000d5f4655fd6f4655fd6f296403280a2629c0004008000000000000800053d2a000af3010004000000000000000000000001000000100000004843e56681f3e02e895e26c556cb7fc6717f44a2c0a0619664b5a8593ed237fb7d5fe650fbd2c39202af3c11738f", 0x6e, 0x4100}, {0x0, 0x0, 0x2030000}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="fd", @ANYRES32]) [ 1229.106445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.241268] loop3: detected capacity change from 0 to 131840 [ 1229.245341] loop6: detected capacity change from 0 to 4096 [ 1229.251149] ext4: Unknown parameter 'ýÿÿÿÿ' [ 1229.264894] loop3: detected capacity change from 0 to 131840 [ 1229.266394] ext4: Unknown parameter 'ýÿÿÿÿ' [ 1229.280971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.355667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:35:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x4}, 0x0, 0x0, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:35:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x2a85b138}]}, 0x14, 0x0) 20:35:21 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x4}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xf0ff7f00000000}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:35:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffc, 0x1, 0xfff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x3) r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x2000b) kcmp(r3, 0xffffffffffffffff, 0x6, r1, r0) 20:35:21 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x2f}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:35:21 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0xf4}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:21 executing program 3: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e21, 0x3, @mcast2, 0xea10}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="5b68debe1f3b1ec438bbb79271f29f75a398d673d7bd", 0x16}], 0x1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32], 0x188}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000008c0)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000900)="174fc22f1b313ed8de7b53b1e8d5a98fa26d3bf67b2b988ad42cb10822108d345b23f4cf1f21239ae4005884abeaec0095c027aefd443350d7d190e063", 0x3d}, {&(0x7f0000000940)="72108bbdbb66f23d10fc224e15b0a85616ac1f40c239807f9441f57d8c62e6bcc988972b27268e8a3d35e6310ecdc48a3a9777cc0401149dfe758d9340f0808e509e953adf974a0f18c42a2362817bd5087350fac19c68052c0cc5b9ec90b75909530a93efefda13f68647ceb616c941730d94f4e07ff302f1ab3b81c62b8b254af26a1126359546c99e582ea578d8ab7fe51f96d9f341d03db5d1b974629267b2eb8063e9398f461d4f1285e39034b2cfd208bbe75dc31b7f127d3c46e064b923fc917b4c7b7e49612e", 0xca}, {&(0x7f0000003ec0)="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", 0x1000}, {&(0x7f0000000a40)="e70a23b784d180f5d064a5e732764aff1b8f0ffe3fff9022e60ff9ed048c0b91ba3763b57e3dea245f728731dc1e9f69723233855a26a6ac11ff6a67e22596ce9df3f2511801af2f48", 0x49}, {&(0x7f0000000ac0)="31b89be7525d474fce9a9766376c90e75e24eee905938699befc8f4f88d27e6e71122f0148aa23bc203797ef346b359feab291a704bc9ec5b33331b2847131915b09baf3782ad2e5c8861a70b0c75c596a0a554d165ce51ad277a10dfaf7634d48b4d1ab5ea63e4abf8a728875b07d06a1ada06655778379dd0c97ec32e25c12a04fb18f42399a5fc9ea4678935b07cb309f1c", 0x93}, {&(0x7f0000000b80)="3d03fea39d7d83ed2f2a53bbf44b8c42ceb9197d59787e7001", 0x19}], 0x6, &(0x7f0000004ec0)=[@tclass={{0x14, 0x29, 0x43, 0x10f0}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x20}}, @dstopts_2292={{0x140, 0x29, 0x4, {0x2e, 0x24, '\x00', [@pad1, @generic={0x9, 0x96, "ff60333373f17557ba2aa789d33a99e7309313f4709790763993f6ba8dbdefad79e94340d99a54b1d2bbca1d3281e41f332a837a6bde920e130a5e6fd10a17cac6efb971d723b7d71290c681116b93107cc312437956f3bcfe12e12016a937dd8c21c2e27faec9d536283de07b8d8bded13125326c1f9da4d7149e7ac2b3de451e674f32391c91758ea07988f8cd5721cc34ce0d6489"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x82, 0x79, "0c92bcb6fd233e70a0457c4a304180b6ab93411428ff89e83700888c3c3b355cbbedde40adf3f85b71568380abb05732593a401e78444f7eb60119e155e93f58b891844e6923e6e2f3a5c84b1628984eb7eb02907da711e22b631603e837c8094886d75cc05bf0548408b1860c30af42415d10ae063e152e0a"}]}}}, @dstopts={{0xb0, 0x29, 0x37, {0x73, 0x12, '\x00', [@ra={0x5, 0x2, 0x8001}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @pad1, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x38, {0x2, 0xc, 0x5, 0xffe9, [0x5, 0x200, 0x3, 0x7, 0x1, 0x1]}}, @hao={0xc9, 0x10, @empty}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@ra={0x5, 0x2, 0x6b65}, @calipso={0x7, 0x10, {0x2, 0x2, 0x3c, 0x1000, [0xd0b]}}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0xff}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8013}}], 0x288}, 0x40) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x1198000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000005c0)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7f}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000ec0)="c7ab5d451cff5a2df2a1f6d6fe45629a8a2c9ee3151419bd4ef5453db9c4d6733e49abb9171b927596529b4ed8da91708fe44b16a5d95feec065ce2befc59fe80941bb3b0b01ce257696a73db17f15ee7d11ea8268629e5ab013ffbcf60d94f6ff76301a90c61fcb8235636e5ac357a85097d5117d23da004b96b7e1b4043e51062dfb3412131d42ef8f34777f8cf1ff6557f40dcd7c5354abe28edbd04ef07a6e9aa7a6c14187f4ed8f9bb3ff8fd3641e5645579b5b31511474cba57fc85da33eb07a518c18652792ec216a2846b12d6146881911d6129035f15bec0bf3894163574f8c63def8c2e10d96ce06a0ac0880e3c03e59998360d202e4eaf18cf3d67b292407cf9e64834ef96c893b31cc6eee7b8ead3a29bc5019f0978c05f771a9407069cee0c4c2adcf8b8c538e9c06c741c312387797aaaa96763f16f227c662c85391d09fd04431b85c725a1bc5c48ecf9c4672aeb96dff2741e99105e06c14bc3d13ef6953fc0b3d482e2fe83f756191a3d0280fe49dfc2bf4338cad21af9b43b006b532e4fc2daa321d1cc4dcaf33607c7c343a446539fab61ff0c7b860a148cf16364798af985b7ab7e9b638a28e722e48dd56612a3a688fd5df77eb0999e3cdfe45f628756071aacf70d701459451f1e9282ab5beb508873189545ec1b1110ae780164555e36b3767a5bdd05c9c077b7f464b71073c17d6ad15209a8de4dc0dd52f93764d701a573ad8cfe9a8f56f42d560586ad0adaa7fcd29f7703f4cc988334094515c5adc8619937b2c4730cbd9d8e45448c4b7b241001e4b07254e71981d50b8daedce3eb258fd20f6a204da8f2efffcf2486e15236c860aef168b392ce2627209e65fa01d18e7d6687af6405a20280483114a018385e7f3bfb3b4aa3d5de744a15a334fc7420c663f923f7f8ec7ac8f92d2bc93785d0de163c4b9741bb887350969dbd0a2f3d06fdda7ddb233517f99e6f35fab5a36aef64b2fa104a348d8a4752dac6fcbfd2fa3ce945930b9de7b69d028c0f7298c837515534bc24c25fb3c47f8ae443dffb116455d26080617b5fc699901c5fa1337f3ad4acb37af214188d366f5ccb38aaca4f3ffab3b2165708ac4c761e4e6fdb9a12c8ce6a5ea936179be916299cceaf670a99ea09352a14517a6e2914b37722587046eab881a663cc24c0ba6c5481006bef70fa63131d777ea3c3ac0d0239c4a8a14cd1d2efe97fe9d6175976781ada8b7d75d0407c8da1c8c2e59005037aa1edf4711ba67aa2901ecc630e0d68dd61484f986f477bd75d47fee4cf0aa8fdd34332ca15a93115e677cd4c48b1906d378d3a5f19455ba8e6741a208901db934f9b1dcf1631bc522bad296f130a7da8a1fed6cacc145d4cb57bd417258a0a357ab51526ad70a366f115f65fed3f31445505f2448b3c83e806040a181f364632dc66a76e6a5f51e3d5f4dab02f57c7ce4c970963cbdf97f8c77a2b20dce84a1930198ae8de37939665b98ff25390cb457d4bbe6c1ded88f13be17387399eacb563e54315ab0ab7ad2b78b6d894ec8b2dd30f5e4a175260761b1aeca89227d725d30a14cdcebb306616aed37ad55170bfc6c3433093d60035ff0686e0e201735aba419f723278c3a096f6ee88835866acb254a2778dc94408e7e49b17ee222d6ab211ca948f88d950d2eaf6cbd8ba3038dfe2bd5317beac1105b59c442d9af868cde68e9312bc1381d00712802a9ae35a10b622bd332bd3ced263de3e1f3b42dc17edea02056fea2bc10f91774c21fe2afbeeae391ea65d2e2ffa33222914c512126b324ddbccf81c6b669a97d519658349da3125498d8479ed745400bae4fb32bda159f384060425730edd05e7d9a81d136d02d07bd9c57b4d02cc1c01c629937ccea0e31832afd8b4f0510e6b8d6e97d6c83b25863b6c22fcf21246f4f48dce9d1de3fafd8254848e98514bf56d5071f0224a1f8170d1876eb2fb599923b15c59d98c11aaf27f465d8aef9d1a8ec012b1b4eb897b6792e802116517ad36df98f522ab9d201f7fa7c50cb5457432b32dd6a192b4f7a2a640cf86be92c8dae404e1812f8f35f7981bfaebcce5caa5a5c2e44b5c5ed38f49b55aa2eca2853e15853805373e63adce73edaed6ec3b7808a4246776595971474773bfe46081f52fd17e3ea8c3e24fbc4395ed367bd3b971fcaf4cba5b833775de80759723a9a0acb52e67a9575705efb02706d3771b288dad31847c1607e152c9915716029ff20f22d23893a0412f40b6813352a95b330a7ea97f132c2fac1ab5dcbf186044b1c04b0e8e369584e82f3227d7b241aebcc2ca65a681afda957b1c0eb9b92e343f76809b7b0b184715074740feb54eea64693e980835a9ff23e3ab27c102193bb73423f804da96843314ce60b8ea09f43864b298537cc2ff80958ac2b1b5577d5b588637eb6f51703808bcffa2f183e4499aaac824b1b355363d871281ccbee73df0601483bd8ed7a73fe0bc392b600afbdac7d9ea7cb507b7b6b65878c6b51e68e2cac5eefc05d222d21a326a8bbd1ac22dffb42b81b0729e60c20922315416cc124fe32defdd17a6b955d5a2f5b1ce8d0abd6b4114ec733ad4c213f534f2a26e04a58b1b967185f20d13c932de62248e2d0b017071b246ae5d70b0c4657bbe10552ce9ebcceef917b8761c7756ed89aa451a253fa3802319520ca68be86d2699ef707bbf9a05a5debafe1adbcfa0f7ec5c99fd9e4b86f20c80544a0d1ab70513f7d5fd38fb5ddcaf0c98ab78df7da6aa4f0afc232a60d1e06611b0830fdefe81f6f1c08c4e6a5544051423140daab4ddcd48b8820af0d251cf776feb0c9aa7a595e48454366ca5c47c8b12022ed73db740a214f00d38f67a8f31f21150c8a6ea94dffa85779cd4875f7bc30dce4ae7c196b97c68a3f3a88873a190e10d54980ec70f70d3aab7b81aba6badc6180bf9cc9f069b3f8cb36c616c03f8b2458affd40232c2928f889a41aeb270fae1707abb12290d0174eff2cd3980d3ada35057545f9b39aa34540202f1e36de7403935301cf479a44740267ee648fba3aaf09e266f6371ce970a9602c9791389f30395a4371104f7c5a1e708a85c4530ee5fa3070f2ec2914e9cb642c31197aca665fa1f92915500651af9e754e957b3e9142f66e54d8932c8af58f1228de962c4ae9bc15c5c98422c290fd05003dddc4241ea2b6e68c3c3aa4205e99900762529f6ff10d43dfcc9fe3580897f945c241b5a8e61db48a6ff96816c0b38fffaec1b45010b9d3d236758672d6a12223d78554b964057cea4ebca143bb13573449264f19e22b98f3432870ffde5a1cced7a850f39fa2ca38a58ce545a9c42184d24225086da9bec2d3f57973040f8073b37a00fd95d75d81809075712c4e76bfb5f6abe22854413c6cb6ab6e272c4fb15af4b5705578ff02259715ef6efc4bbebe165697d98e3cab486ab1a356ad4ed7e488ca5619a49b23c9b695b93f42c619f23a312edd01210af3443954b03c373d5fd1864864f4c7c7d11ff6e32a26d6150ae9162ce64711a8d3cc2ebb8ab0dd909d1cffb488b41d80c3257d207bace7aef9d8d4a2e36b55c071f5aac5e963de30d90dc2f0ae6f6c176f817cad48d221b1d2b91b1f4dd7cd77bd1606871d21ce972fabb19d6f80d6db971d1adbb228e35363b130a1963991040afdc9c65fb28a55e512d1c9734173dd37a9f3cc46a70b3cf0c41b2b68a9c41a39781c4cee9de34299dfcc93b1baa967194dc3c2e9fccbb15097297d16016f230bbfcafdf8676785d08a3f2bce994c4e7717322c19cde62c12dab4513945e1b3faf1cddc052f3cd7e217c553d8fcbb66d441f355be42d45d86fb9076073c346c3b18b6c18dd84f01f32740a674d7b4bcae38845983cf7216b16265da49343b620b46225dd18eb5914fb9f3f992dd7e2d9143758fe822411530cd5659f7f9c46cfd1d43edaa00713abdded30413d6587ed45bc10ef11a7c58fb406d64ead784bd1ec1311b2296679def63fb128ea2b060a4470b969a450065c47a946eb2354a5afd5aad17e0b365c11787d0d3577cc6ce3fae1d2760efbaeca88481c2d7b7213f7c1a01fb6440eccd7ea66d01491d343313a28fdc007d9d91044e2fdd4c848de0dca0bf99630b1fa237a4508e8393ecbddfad0285114f9cb1ab1fa42256668c8f76e7171087369cbdd463ce53f3037e8640e03677a026b30e1a081f32fd96bf8f5c4eb4f8653eb587d886f9264e65beb5fcb189e30f049804f89e0a68fab513207259a7ab85d380cd0a67d3ba52483661f92135905a1d4c74a7a651cc88ce88c79843e7cc3c36fa269efb2470fe931d8d2392d7832f71196375ee0cb00534e04bc30eaf714a2957dc2a8288d258b29f55dd14a45c42f9ac7187068fe259a04a832cd203954777d69d82c32e1d22d0b50d807a7a29c4c8625f99ec2ab33fad3c37c3e973068a3e2093fa6b742f3143ce90c1f9c74ace86f1bf869ac6bbd91694f14a1a2aacfecf15cc3db6ec9e5d226025fef67b72c1465f83546845e7c71498f6baa97461389ba581c37de91864ca44c33869b45eb893738d82f08e36fdb71db7ff5c2d241484694dede69bd1eda7fdd8dd1f109df430f0051e02041027bd88c974c7ae824a7789688f37cad80146038a38a486c1796c0093a7beb80c0034fc3152c7fd3abf97f52f8c6cf929c943355d088c98a50e109480222e712bad33ff59a6d954655b7f730d8bb5948087baf08e8448673341bd3f093f8f5cd1069414aa9bff7276ebf78afc2b7aff22bfd8cddcc7a262ebb8898d066bd81d2617e63cb32bc368252936021f3d6df03d89972c119384f8652107961cd468cf5f07b601ec51f314e9e13623e12382ad555d8977393955b1c4f2ff34da47d2249fd3a77d5d7fab0d5c262707770b243b9d638de2d7a5d7d0d551f3874d054440c0cf850ac1dd3a65189ea561f234f0f2d85431eb315a8f392da2b1156e9c1cc3e8567a87da799cb873a913d327a96f9087a4137a6877774dbfd2e6283588335a213f8ed679714fb50df8162ad5f77512ac107fba3c11893e9e6173a60f38ab9ff7c088d291abbd84fde4c3986d071b54bf906be8fc0a2fbc636af3846bab951e8f369bdb63e82cf3ed06c28a4a70124aaf1a3df50dccd18fcd94386c31a27c4687f0489f661fae6e9e22b2af2b018f491bba34745f46034798964399780e4a1df6726ae3ef1f42f6438f78e3c09e5c3a2711a70bde01f64f57e28da7abe7b36407f5a70da30c3cebf83bc89db69d75ef466f89b5fdd8f9d4d2248986a16335d87b4aa0c5a6c119de5b13728782b97a7471049e15ccbaa484349e9064e88dfaabcbeee923354c843c38fcb87e532488bb210ab69f85d0f40f7ab90896288fef56579b3c0a3411ecd9855b7767ebb3714cbeec83510ee325ad6da06ca3acc586ac0f642e37ba993eae5322cac193f6d37d8c9ebe61afb0bb5a782ed4c9b76f0b2c7c7c19355dc3b9b107daf35c13a3766e20d6392513086eee6d5906563209291f4ae3166e48d4c90b4f648a67f89e9ca50fcb25a5a8f2b8537cafb732d15a72baf64eb98e1b399a68a2170950252da3cba5b162f9673787753700ce822250fb2d41bb2552a7de736c3a4e6c8ad225e6d524dfc384d4456e28a381c9cf088fbb9b062dab3ce1c1411efe0827a8c30e5473621377b1582bb97eff62aa8e5bea88d97c28058b66bfcf8e666ac271886a3a4f085465225c8bfe482e373192c52549278ec888141e31de5036a1c180a14dcb8cbae57e14af0ce2c12b79", 0x1000}, {&(0x7f0000000600)="30f3311b43f6442f49493e4c13015ed79cb75e00405060914ad36b510438395db0babbd3072698da4c692f048c02fc7326ff92d08ff682acd4107984ee0329e447fd98adaeacb39763bd7ce68383db4da71bd52fc99e537fd112676dc30a99a0a43d9466989db7506576b63840", 0x6d}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000000680)="7b9f75d13325d234867d550dd6b88e5f611405be6397e3e66ea7515f67cac40ded46d33fbf0f254c2e814999b0332cba7a1c52ebd0dad943a4687ebd6bc3ebfe0f7e0c40ab3d04c8d950adeaea6380a9cfaf01ab880e6749908115971b727095f4a3d5987e5a24ca5dab4c67cad112dd4b4e3306adca64b9f47538e1e1e13bccc7cb6caaf5389665933dffadffdab7f077cf1dcef4b80fd69220546c9e1fab73d89cbf7c5cf4944d9a", 0xa9}, {&(0x7f0000000740)="d84f6f2255aa8db49ffe32ff881e90da0468afd8f90ad9b3b5a9e18e45619f8e0aea88c3d84134dafae16f27733f1b7b96e4406b8ddfa0be162a8c0118492c3c7fa8091981a85ef3a42d23e95f42137ea2259dc7c584bd92db5e73bc709efc02941d6ca0c8accd265dca38043b732cb21d20e4b55f5b763ec3400db291ce216212753aef70", 0x85}], 0x6}, 0x24000080) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xd5, 0x8, 0x5, 0x4, 0x0, 0x6, 0x88000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x81, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4, 0x7, 0x1, 0x8, 0x81, 0x3, 0x9, 0x0, 0x93, 0x0, 0x1f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000005200)={&(0x7f0000000cc0), 0xc, &(0x7f0000000e80)={&(0x7f0000005180)={0x44, r5, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x44}}, 0x4) ioctl$KDSETLED(r3, 0x4b32, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) ioctl$TIOCL_SETVESABLANK(r1, 0x4bfa, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000580)={0x5, &(0x7f00000004c0)=[{0x9, 0x82, &(0x7f00000001c0)="efcc147f93bbd6d15762d5233b723166964b585f0cce89f64d81d9644419493f54833a2407c9ea5811632c8457202c11b3d95a041eb50586e28e9a4ac8e6c44a47be5f0f80d0311f71caa9ecdc356186111f46d478ab21aee18ae0db148c60a3fb3a548943f853c62d7e59242b790253cf7fe2f69a1a13982df2fb63725be118915c", 0x1, 0x1}, {0x7, 0x51, &(0x7f0000000340)="ce0fcee8d200eaac40f4313830d6cf891d2c1d1c9a9eb3e350f40dbcf5ecfef5962ff92b46a6e63d30fdafad94113d970d51e342f1cd85c98cbd808e1821e0ec7aa44eebd057c4ac85882a6ad2c99c0c8c", 0x0, 0x1}, {0x80000001, 0x52, &(0x7f00000003c0)="e9c82eedffcdc00104e7ea996ce3971b302c4868cc9aa459f8f554d6dd5f71fe283fc7eb449a606ee02166d853aae78764e228abf40f764e380531521cb7c68fbb4f38d3b04869be423acb324407ced45ada", 0x0, 0x1}, {0x1, 0x44, &(0x7f0000000440)="c4ec79c57eafa7009e8d192f20955ba531827c36adb339aed929a650e0f44568e9357affe3a9a0f7fc337ed0db01754ad1c46913c51727f6bf0d294454f59f7f5294ed37", 0x0, 0x1}, {0x9, 0x1c, &(0x7f00000002c0)="0299c6ab3c519a31482630d4bd6e350d7f5a9ab8b2e617329e8b6d28", 0xc03c52eefa375da9, 0x1}]}) [ 1240.091424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.092831] loop6: detected capacity change from 0 to 4096 20:35:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:35:21 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r3, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xffff}) read$rfkill(r4, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x4d277) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r6 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x2}}, './file1\x00'}) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xb0a) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x7fffffff, 0x6, 0x4}) [ 1240.120126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.171393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:35:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@xfs={0x1c, 0x81, {0x9, 0x6, 0x0, 0xac}}, 0x103000) 20:35:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x80, 0x0, 0x0, 0x9, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 20:35:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x8}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1240.277537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:35:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x38b1852a}]}, 0x14, 0x0) 20:35:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:35:21 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/24, 0x18, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 1240.342101] loop6: detected capacity change from 0 to 4096 20:35:21 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280)=0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r3 = getpgrp(0x0) r4 = gettid() tgkill(r3, r4, 0x2000b) r5 = getpgrp(0x0) r6 = gettid() tgkill(r5, r6, 0x2000b) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f00000003c0)=""/14, 0xe}], 0x5, &(0x7f00000009c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000ac0)=""/150, 0x96}, {&(0x7f0000002400)=""/40, 0x28}, {&(0x7f0000000b80)=""/1, 0x1}, {&(0x7f0000005900)=""/102400, 0x19000}, {&(0x7f0000000c00)=""/177, 0xb1}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/181, 0xb5}, {&(0x7f0000000e00)=""/149, 0x95}, {&(0x7f0000000ec0)=""/54, 0x36}, {&(0x7f0000000f00)=""/7, 0x7}], 0xa, &(0x7f0000002a80)=ANY=[@ANYBLOB="9ed102daf2353ff56c2eb472740b19bca48151cd51cf7c1f52c9342688b7ab73a529628a21b5dcbe1977ccbdf8ddf5e1b7b84947b50a783415a9266515354714135edb7c1dd6f0c7b608f35f74259feddae0101a0494d629c7cfd63ac31d4c3aeb8ad14aed07d92d9f2c08ca885bc0db334522715f4147910aece1747b1a9539931c6409a78b20a4df68cffd717573cfbf73452c8bcee41aceb306ef916c23bf5c0a7dfa0b5b5a48a32ef30084", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x88}}, {{&(0x7f00000010c0), 0x6e, &(0x7f00000025c0)=[{&(0x7f0000001140)=""/216, 0xd8}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/145, 0x91}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002840)=""/193, 0xc1}, {&(0x7f00000024c0)=""/92, 0x5c}, {&(0x7f0000002540)=""/106, 0x6a}], 0x7, &(0x7f0000002640)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x3, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r8, 0x0, 0x0) clone3(&(0x7f00000027c0)={0x41080000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f00000002c0)=""/3, 0x3, &(0x7f00000004c0)=""/154, &(0x7f0000002780)=[0x0, r1, r3, r5, r2, r7], 0x6, {r8}}, 0x58) [ 1240.363964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:35:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x80000}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1240.406396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.420655] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.448060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:35:31 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x1ff) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r0], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) close_range(r3, r3, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000180), 0x0, {0x1a}, 0x0, 0x0, &(0x7f0000005900)=""/102400, 0x0}, 0x58) 20:35:31 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r3, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xffff}) read$rfkill(r4, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x4d277) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r6 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x2}}, './file1\x00'}) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xb0a) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x7fffffff, 0x6, 0x4}) 20:35:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x3f000000}]}, 0x14, 0x0) 20:35:31 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="3f6b03ff4b1e470e330fca605069d3b49869292d321d4cae5a7616840a67723f1d4184508594752e12ee0ae140b3071579f560971345ffe644d8d11c8e34841c1f6f0704477e85d4dba0667a05f642e53aaa86ddffa1e39117da7608a182c9e50bf15f7622c12ac611f72aa8a0fb091d76d3de47da7961f4fc2150e979c541198e6644505f56d8a7320f5dcf5d1013bf51482d897fce734b01e8fdd8804374b068493bc9ab921b73e89263c75cced23d3e", 0xb1}], 0x1, 0x3, 0x7, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000021c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/237, 0xed}, {&(0x7f00000006c0)=""/246, 0xf6}, {&(0x7f00000007c0)=""/79, 0x4f}, {&(0x7f0000000840)=""/64, 0x40}], 0xa, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000ac0)=""/183, 0xb7}, {&(0x7f0000000b80)=""/30, 0x1e}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001c00)=""/123, 0x7b}, {&(0x7f0000001c80)=""/194, 0xc2}], 0x2, &(0x7f0000001dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f0000002100)=[{&(0x7f0000001f40)=""/248, 0xf8}, {&(0x7f0000002040)=""/169, 0xa9}], 0x2, &(0x7f0000002140)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x4, 0x40012001, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000022c0)) 20:35:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:35:31 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x11b}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:31 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x5}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xf0ff7f}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1250.443047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1250.457598] loop6: detected capacity change from 0 to 4096 [ 1250.473985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:35:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x8cffffff}]}, 0x14, 0x0) [ 1250.522507] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.541324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:35:31 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x6590, 0xc802, 0x1, &(0x7f00000000c0)={[0x200]}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 1250.615962] loop6: detected capacity change from 0 to 4096 20:35:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x7ffff000}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:35:31 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x86, 0xfd, 0x7f, 0x0, 0x100000000, 0xa102, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x10746, 0x100000001, 0x401, 0x9, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x40}, 0x0, 0x9, r0, 0xd) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1250.660239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:35:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xe4ffffff}]}, 0x14, 0x0) [ 1250.710935] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.741512] loop6: detected capacity change from 0 to 4096 [ 1250.753599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1250.768210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1250.845060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.856944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:35:42 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x42, 0x6, 0xe7, 0x0, 0x4, 0x48088, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x5, 0x6}, 0x40, 0x1000, 0x0, 0x4, 0x80000000, 0xd34, 0x4000, 0x0, 0x80000001, 0x0, 0x3}, 0x0, 0x8, r0, 0x9) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x29, 0x0, &(0x7f00000023c0)=0x24) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @broadcast}, 0x240, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='macvlan1\x00', 0x81, 0x100000000, 0x7cd8}) 20:35:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x35) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:35:42 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x6}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:42 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x2f0}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:42 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @isdn={0x22, 0xa2, 0x20, 0x5, 0xff}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x3f, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)='bond0\x00', 0xfffffffffffffffe, 0x2, 0x8}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:35:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffff8}, 0x42082, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xffffffff80000001) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r1, &(0x7f00000000c0)={{0xcc, 0x3, 0xff, 0x2c8, 0x8f, 0x4, 0x113, 0xcb}, "17c495a6ef9f7ad192ac92a5d7302ffd287ac626d36884b039d63e67964ec26e7b9175f0c945f95926e88fa95802eded9f7d1e53bc59c0b94b650324deaa8b66255c6ddd7c71e3192a70809a1e62631e505aeb3119d977c3e45e0d89c4e44cde5c354a8ada"}, 0x85) 20:35:42 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xf6ffffff}]}, 0x14, 0x0) 20:35:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x7ffffffff000}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1261.066927] loop6: detected capacity change from 0 to 4096 [ 1261.068064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.075435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.095913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:35:42 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0xdc, 0x4, 0x0, 0x0, 0x0, 0x20808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000740), 0x2}, 0xc0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)=""/237, 0xed}, {&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f00000003c0)=""/37, 0x25}], 0x4, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x1, 0x0, &(0x7f0000000540)={0x0, 0x3938700}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8801, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@msize={'msize', 0x3d, 0x8}}, {@fscache}, {@access_client}, {@loose}, {@cachetag={'cachetag', 0x3d, '[-%[@*\xa1]:]{'}}, {@uname={'uname', 0x3d, '/dev/usbmon#\x00'}}, {@msize={'msize', 0x3d, 0x80}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt={'euid>', r3}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/usbmon#\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/usbmon#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_lt}]}}) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:35:42 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xfbffffff}]}, 0x14, 0x0) [ 1261.188730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:35:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x8000000000000}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:35:42 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) sendfile(r0, r1, &(0x7f00000000c0)=0x7, 0x401) 20:35:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r1, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d050d", 0x1000e}], 0x1}}, {{&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e8afc870753ff6119517271f31116d25438a6fe9b5be0fe0bc98ec86fa7d229ea58ff66ffeeeeaacf7659d58bb0c057b08a4030000000000000100"}, 0x80, 0x0}}], 0x2, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000100)=""/184, &(0x7f00000001c0)=0xb8) 20:35:42 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xfeffffff}]}, 0x14, 0x0) 20:35:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x0, 0x73, 0xc3, 0x0, 0x0, 0x48, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x2, @perf_config_ext={0x0, 0x8001}, 0x40280, 0x4, 0x80000001, 0x7, 0x8001, 0x4, 0x1, 0x0, 0x1, 0x0, 0xc7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xd) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x204540, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x1000000, 0x3, 0x100000000, 0x40, 0x8, 0x7}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1261.366542] syz_tun: entered promiscuous mode [ 1261.379276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.381334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.391330] syz_tun: left promiscuous mode [ 1261.416894] syz_tun: entered promiscuous mode 20:35:42 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xff0f0000}]}, 0x14, 0x0) 20:35:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xf0ff7f00000000}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1261.447653] syz_tun: left promiscuous mode 20:35:42 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x7}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:42 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) lseek(r0, 0x331d, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getpgid(0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)='^', 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030342c736d61636b66736465663d002c7375626a5f747970653d5d28b3212c666f776e65723d", @ANYRESDEC=r5, @ANYBLOB="2c6f725ef4fc0b84626a5f726f6c653d7d2c736d61636b66736465663d763a2c00"]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r6) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r7) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x80, 0x3, &(0x7f0000000400)=[{&(0x7f0000000940)="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", 0x1000, 0x9}, {&(0x7f0000000180)="22e798ad71e642d7a5e1bdb53c16339b09376ed735cee7d9a586f45c6d90d20efef52b3a8eb2b9a7100ca4dc6e41b436d4eb48f9ed67944b6ee60f502201b0e4c849e536691ffa4cfabbbd0b571742dffe3382e092cbdeef1b5e9a24f5d0483d9b507d7088e094710f73ab991deaad25fe3230268ff85391f5e549ea99375d37cc0db73b88c24faab66d988f41cc79fe6a955e97d508fd348128b22bf0e8c732445b3b1b30f9bd8334f3b5104691529ff1e49a17ab8f9fd2be75aa2d91ed7bcf554f14707a353e6c5d385f6cfbd7", 0xce, 0x7}, {&(0x7f0000000300)="4c9ba327cc04c40d4ed4776e19664b64c345fb104b03de64a6d48d8f7a23e40085e79737e7e81353dd06168ec41f80c6b321382781f85436ba75df3f1bfb4f36cb847082ae974816eb3bb9176dee14e33a0f0cd3dfb07d2ab344c89db211f731a522177d4e573b656d1b0a21d03a3055e0593d569c15c6c48bd12215194dc3cbb4ce194dd6", 0x85, 0x3}], 0xf5492, &(0x7f0000000640)=ANY=[@ANYBLOB="67727069642c66736d616769633d307830303030303030303766f572666666662c726f6f74636f6d5f752c646fee745f00000000005131fb6f7722403f0966dc2c686173682c7063723d30303030020000003030303030303030303032332c736d61638966736465663d252c726f6fa4106921b203c4e5ef0689b56704f774636f6e746578743d737973", @ANYRESDEC=r7, @ANYBLOB="2c66736d616769631a28af79553078303030303030303030b69a30303b30382c40"]) open_by_handle_at(r4, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 20:35:42 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x300}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:42 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x200, 0xffffffffd55d5317, 0x0, 0x0, 0x9, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0xa0000004}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:35:42 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xffffff8c}]}, 0x14, 0x0) [ 1261.584013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:35:42 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280)=0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = getpgrp(0x0) r5 = gettid() tgkill(r4, r5, 0x2000b) r6 = getpgrp(0x0) r7 = gettid() tgkill(r6, r7, 0x2000b) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) clone3(&(0x7f0000000500)={0x208820000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1e}, &(0x7f00000002c0)=""/107, 0x6b, &(0x7f00000003c0)=""/21, &(0x7f0000000440)=[r4, r7, r3, r2, 0xffffffffffffffff, r2], 0x6, {r8}}, 0x58) [ 1261.618630] loop6: detected capacity change from 0 to 4096 [ 1261.625512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.644518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1261.663439] loop3: detected capacity change from 0 to 8 [ 1261.719569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.894084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.941137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:35:52 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x46000, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c40)={0x0, "2878d82b49f12f27d5145142da1b8eed"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001c40)={{r0}, 0x0, 0xa, @inherit={0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffff00000000000007000000000000001f00000000ecffff070000000000000010000000000000009900000000000000ff070000000000007ff60002000000000300080000000000f7ffffffffffffff1c0100000000000008030000000000000100000000000000ff000000000000000500000000000000ff07000000000000cd55473c24808c83e4f3272ec37898c914"]}, @devid=r3}) r4 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x3, &(0x7f0000000300)=[{&(0x7f0000000180)="e7ebc6c324a6b92069bcab44c9562cc6c4184f6f21514f987b5ef5f3d62ab39b591f604c1dec537d6180edb70b", 0x2d, 0x1000}, {&(0x7f0000000280)="adb15a134a", 0x5, 0x81}, {&(0x7f00000002c0), 0x0, 0x7ff}], 0x90, &(0x7f0000000380)={[{@nonumtail}, {@utf8no}, {@utf8no}, {@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x81}}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x30, 0xf7d53a5783134ce5, 0x34, 0x61, 0x35, 0x64, 0x33], 0x2d, [0x37, 0x55, 0x36, 0x37], 0x2d, [0x0, 0x63, 0x39, 0x63], 0x2d, [0x35, 0x32, 0x37, 0x39], 0x2d, [0x61, 0x34, 0x31, 0xae6de5820f275d60, 0x33, 0x62, 0x66, 0x62]}}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_hash}]}) write$binfmt_misc(r4, &(0x7f0000000440)={'syz0', "4155dce337fce3182c1e54bf649a2fb0cd74fd7e4c89cdbc6dc24f6d051cc9e0e1c86a4d0f2121367c1ceaf3ea47f382265eb183bff0c0b9d26613cb2a332a352c8252224738"}, 0x4a) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) 20:35:52 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x480}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:52 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x8}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:35:52 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) sendfile(r0, r1, &(0x7f00000000c0)=0x7, 0x401) 20:35:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xffffffe4}]}, 0x14, 0x0) 20:35:52 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r2 = io_uring_setup(0x2f9a, &(0x7f00000001c0)={0x0, 0xe9ef, 0x1, 0x3, 0x256, 0x0, r1}) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) r4 = inotify_init() io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x400, 0x0, &(0x7f00000002c0)=[r1, r1, r2, r3, r0, r0, r4]}, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:35:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xf0ffffff7f0000}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:35:52 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000d5c0)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000240)=""/173, 0xad}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000002800)=[{&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000000640)=""/7, 0x7}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/208, 0xd0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x7}}, {{&(0x7f0000002880), 0x6e, &(0x7f000000d940)=[{&(0x7f0000002900)=""/103, 0x67}, {&(0x7f0000002980)=""/254, 0xfe}, {&(0x7f0000002a80)=""/96, 0x60}, {&(0x7f0000002b00)=""/78, 0x4e}, {&(0x7f0000002b80)=""/98, 0x62}, {&(0x7f000000d840)=""/41, 0x29}, {&(0x7f000000d880)=""/142, 0x8e}], 0x7, &(0x7f0000002c80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000002dc0)=""/7, 0x7}, {&(0x7f0000002e00)=""/80, 0x50}, {&(0x7f0000002e80)=""/32, 0x20}, {&(0x7f0000002ec0)=""/118, 0x76}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x5, &(0x7f0000003fc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000004100), 0x6e, &(0x7f0000005400)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/105, 0x69}, {&(0x7f0000005200)=""/29, 0x1d}, {&(0x7f0000005240)=""/28, 0x1c}, {&(0x7f0000005280)=""/235, 0xeb}, {&(0x7f0000005380)=""/117, 0x75}], 0x6, &(0x7f0000005480)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000005540)=@abs, 0x6e, &(0x7f0000005740)=[{&(0x7f00000055c0)=""/43, 0x2b}, {&(0x7f0000005600)=""/185, 0xb9}, {&(0x7f00000056c0)=""/113, 0x71}], 0x3, &(0x7f0000005780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000005840)=@abs, 0x6e, &(0x7f0000007ac0)=[{&(0x7f00000058c0)=""/184, 0xb8}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/9, 0x9}, {&(0x7f00000069c0)=""/4096, 0x1000}, {&(0x7f00000079c0)=""/252, 0xfc}], 0x5, &(0x7f0000007b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000007bc0)=@abs, 0x6e, &(0x7f0000008e40)=[{&(0x7f0000007c40)=""/252, 0xfc}, {&(0x7f0000007d40)=""/19, 0x13}, {&(0x7f0000007d80)=""/75, 0x4b}, {&(0x7f0000007e00)=""/10, 0xa}, {&(0x7f0000007e40)=""/4096, 0x1000}], 0x5, &(0x7f0000008ec0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000008fc0)=@abs, 0x6e, &(0x7f000000c240)=[{&(0x7f0000009040)=""/4096, 0x1000}, {&(0x7f000000a040)=""/120, 0x78}, {&(0x7f000000a0c0)=""/241, 0xf1}, {&(0x7f000000a1c0)=""/39, 0x27}, {&(0x7f000000a200)=""/4096, 0x1000}, {&(0x7f000000b200)=""/34, 0x22}, {&(0x7f000000b240)=""/4096, 0x1000}], 0x7}}, {{&(0x7f000000c2c0), 0x6e, &(0x7f000000d500)=[{&(0x7f000000c340)=""/227, 0xe3}, {&(0x7f000000c440)=""/45, 0x2d}, {&(0x7f000000c480)=""/4096, 0x1000}, {&(0x7f000000d480)=""/117, 0x75}], 0x4, &(0x7f000000d540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}], 0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x8, 0x3f, 0xe8, 0x0, 0xfffffffffffffff8, 0x1000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10, 0x4, 0x2, 0x6, 0x80, 0x0, 0xfcaf, 0x0, 0x1, 0x0, 0x8}, r0, 0x6, r1, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 1271.621529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.630010] loop5: detected capacity change from 0 to 16 [ 1271.635599] loop6: detected capacity change from 0 to 4096 [ 1271.640472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.649651] vfat: Unknown parameter 'nnonumtail' [ 1271.666081] loop5: detected capacity change from 0 to 16 [ 1271.671778] vfat: Unknown parameter 'nnonumtail' [ 1271.672877] syz_tun: entered promiscuous mode [ 1271.684924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1271.732805] syz_tun: left promiscuous mode 20:35:52 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)) [ 1271.815660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.932498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.959069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x8}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:36:02 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) sendfile(r0, r1, &(0x7f00000000c0)=0x7, 0x401) 20:36:02 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x500}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4b50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x380000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:36:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r0 = getpgrp(0x0) r1 = gettid() r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x2000b) waitid(0x2, r3, &(0x7f0000000100), 0x0, &(0x7f0000000180)) tgkill(r0, r1, 0x2000b) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc6, 0x7f, 0x1, 0x7f, 0x0, 0x2, 0x2000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb29d, 0x1, @perf_config_ext={0x80000001, 0x1f}, 0x40188, 0x6, 0x101, 0x5, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, r1, 0x6, 0xffffffffffffffff, 0x2) 20:36:02 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000980), 0xa}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000002c40)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000003c0)="a87cf8bbd30090418e1af977b878517368637b391e70b7aff3", 0x19, 0x101, 0x0, 0x3, r2}, &(0x7f0000000940)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000280)={0x4, 0x50, [0x4, 0x8, 0xe64, 0x1f], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x7ff, 0x5, &(0x7f0000000840)=[{&(0x7f00000004c0)="3fe509a819217740f0e72c82374528cf4b1f41de42373e224966825e614ec73ae4186a321cd03a319d9dccd93a448e045c669c9aa23d07e8c4c77e76157f2682cbd0d980927d12a9a37f7dce6c9ecb9d60a591a784c070bd0a4bc67d579e40ac951f3f0ea7f4112b6e82e0f76f6ace1f86dbca2a60b7d76a67c756ed92676170a53007da9cd319726919104b9d44c409cdf78de616b110", 0x97, 0x100000001}, {&(0x7f0000000580)="f1b3de64bd2ece336f108d691aba3b52383779f1328015a9a3f423a48cb4baf5513be7efa7d83886697406d7920a1e6a033c0b7970329921dafff8ad314bfb8a464f471e54bca9bb64eea6f84d6107635cfa6758e69c1a0eee651321ac96bafd1ccb7eea52fc2af7f3b347a94dd587507f6a68955744c3c5686b3fcae4e687836b7dab08e2c5fdc91273367225", 0x8d, 0x9}, {&(0x7f0000000640)="ea7db073658bb70a17a2d52b036e2b8c414213b21932e8941684df241ad3d4c1fc9844d24bd906bd4c4d1f8a28011b538ca8ca7adb58e346a4f850f2cf814c2749a8", 0x42, 0x3}, {&(0x7f00000006c0)="3162bcf12f6de10e637fb2a502fa5b2b4e0d1094a5db54e0107430b09ef67403aa93e4d01a5d540918a6d2eeb9bba8ad9943c728b2eea28283c0781f2f1dc83a87e3410b2d0a0914929b3645659af9ad55e4c421b45b248d442a398da1c3566da66ed64a8a15fe216745e06031d6b9480a787c437a03cf8d2951b5e520df88eb1f2108e58c9767d00bce301f0cbca2aba2279ce36b96e7631a316b3dde72cfdf02ecf1ae", 0xa4, 0xfff}, {&(0x7f0000000780)="5dcefeed71290a5414a7d17eb98211b6a531263ddafb56cb6892b34cb871094667fc843ce21435db2b5788a7e8b2c1c6795097031c1e09237beee374d835b9775c3d03751d6aa96ae05d8acbca13e15eb744956b33350b3ab469f883d968c6818960573235be238ec90f1f154b437a247810da52d0d8e06d266ed2f3ba18af2e6d6313cf47f38a61c2e21479d5b11db4361246ee", 0x94, 0x7fffffff}], 0xa32421, &(0x7f00000008c0)=ANY=[@ANYBLOB='hide,sbsector=0x00000000000p80ck,seclabel,obj_user=[%-%+:^,\x00'/76]) syncfs(r4) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000180), 0x0, {0x1e}, 0x0, 0x0, &(0x7f00000001c0)=""/21, 0x0}, 0x58) 20:36:02 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x9}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xfffffff6}]}, 0x14, 0x0) 20:36:02 executing program 2: r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x2000b) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x0, 0x4, 0x63, 0x0, 0x9122, 0x80, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x8, 0x5}, 0x0, 0xf24, 0xfffffff8, 0x8, 0x1, 0xc68, 0x3, 0x0, 0x4, 0x0, 0xf6}, r1, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x11) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file1', [{0x20, '^/#y\x00[-:,-\'($$&]'}, {0x20, '/dev/ttyS3\x00'}, {0x20, '\'-\\\''}, {0x20, '/dev/ttyS3\x00'}, {0x20, '/dev/ttyS3\x00'}, {0x20, '/dev/ttyS3\x00'}, {0x20, '/dev/ttyS3\x00'}, {0x20, ')[\\%/\')/:])&'}, {0x20, '`{-'}, {}], 0xa, "4a1fa03b6873d7d4711effb85cf98941ad4951d6a60db9735c8b418ffa254898d8e3ba68eaaebc8e17339e014276826320039d2f1ebc9e409f68a51c1bbbdf2825fcd61b644e447146863b4829ca66c29662a610da40b05b6498e631fc784d5aac93f63d976a9206dcead7ca8fe9e40f1f8b92ac5a75f4d980cf3e3e922ecc962eafca97010594d309d602610b82811c421aa51dfaabeaa6e237b10dd21d6a8bf33f9cba376eb963ad20e1c9139ecaeaf24766661215ccd6e6134c95a6edad6c830ae0a5a46786bf211592bb8b0ac278979a877ca26aae09d59761c437532b3e6d40976ee2c362ce26f07a4883015e4ca7c02ba5b5bea3b6"}, 0x167) [ 1281.673878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1281.701201] loop6: detected capacity change from 0 to 4096 [ 1281.704215] syz_tun: entered promiscuous mode [ 1281.706300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1281.749387] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1281.759145] syz_tun: left promiscuous mode 20:36:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xfffffffb}]}, 0x14, 0x0) 20:36:02 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x400000, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@rand_addr=0x64010100, @loopback, 0x1, 0x7, [@private=0xa010101, @remote, @private=0xa010102, @loopback, @rand_addr=0x64010102, @loopback, @empty]}, 0x2c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 1281.813853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:36:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x80000}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:36:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0xa002, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x2, 0x6, 0xf7, 0x91, 0x0, 0xff, 0x400, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x40, 0x3, 0x1f, 0x4, 0x1, 0xffffffc1, 0x5, 0x0, 0x4e, 0x0, 0x4}, r0, 0xe, r1, 0x2) 20:36:02 executing program 2: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x7f, 0x0) pread64(r2, &(0x7f0000000140)=""/62, 0x3e, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setresuid(0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x0, 0x0) read$snapshot(r4, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) pwritev(r5, &(0x7f00000013c0)=[{&(0x7f0000000240)="ce80a20ac0d257b5f8", 0x9}, {&(0x7f0000000280)="965963a5f0bb3f9142886f04c668603e97f234d289f02b7d17c0eea2e9288ecef82e8c9ae35b68fbafc6e7b3647a0ce48fe24a37cfa8b8b6324b0397d279526425686716c202d5e55491e4f96bf91f5b015786f8c584745bd38e666782d0c6d378bb828cfb37e0d7cffa9fadfd4a6218b65b491b98aa1f117c2f6176044581fa7d4db54f63e3192dbfe19393b0da2e37ee593afa8a258d23688737", 0x9b}, {&(0x7f0000000340)="affa64a22ee90e2f2ef70cb0c2a9bceab52cba832ad3cf1a3ad4fa4f6210422ecde4b8b198b7c6b72515571d3e43d62d2f482b2b93cd1bfa4c21f72ca3dba4e5221fb216dc5e50fbd31b78efe2705ad790770c716e5ba847a2", 0x59}, {&(0x7f00000003c0)="882d443c5b9eff7df87dfe277b795f475cc5a2981a6df06ce450bdfe776462d4814fe25b1e44556106b418e75ddee2b5bf604ceee9b73dbb9320b5c9c8d7839c92d5232475f7b499d745ab38154002aecb288f535e69e3035bfb58f29a429138c0fecf67b699377e410330f5edef8f88967286321b1fa8f56bab8746aea46aba3a52631cc8aed20ed1d004e0227424b78bfa780da4ec598657b348e9c9bdf01a9d63dfd88d1247232bb5bfa70603bf64dcf7f6d6315521337386f1c4d438d2b9e9cf723d9aa0ddc53fbfc95bc37b0893cb98236862fe1cd1dcd6f7b15cbcf00d050a9ae2db56b9848733fc01ab88c97daada5db0be12c157b079bf3e6accba6cbabdfcf2b6d6ba67abd91b5b0ba7ef11bed5cfa077eeb2a5bff050317c9bf79885ac27f0c58622130a14eac5d8e8021fe644657508f71cbf223d0cc47a90d9bb9e9a5cf0fa3d88e73236c2ff0ee8aea94ba3cea1a5783be5a2a5c54d43d6135a63c4f147eef5c346a84bb69883dccb003d87672fa54e8b6b51caf45c7205af7d2b809b1500144e348f4f07ef425d6a516d9fcd6f0157911d46a079bd9755bf284e5e74cb72c955c19d19b51ece1e4ed413085cfe348e69ce1bf13a3302d99126cb5fc8bcaaaa10a3c06ebdd29ca4327167e619d55550fb26e0d869e96d40aa6a0acfdda462df4cd22040b910df1c9e83a1b6e5c919caaff47f11598924130f013ad3330daa22b4ef41bfa9ee35767c7d1577a7b11f705ae43b7bf4552f05f6512201039d84309f4b5d85a77646d3b835dc5bda5639f1b2b6e1250e36e7d015a6fb8a2a8795ba0ef91d7239e0dff27fbb2cf971ed6807aff743db7e6535bdc637d790df2a3fa5f53362a1cd40c7a21d6f20065d0bb4df61a797664a2efce6b04c4f20e28574fbaf922069b2523a55ba6edd776e84cc3dd0e1554518d0c7c6fafc2791c44367b5f06862f1d98ffe9a038b51deb1d33455ccb0bdf50c4f6060570fd3e26f13986b0dabd24ce72822916228985291e4dc529f7c4f47b56c76065e6cc4ca03e284275fccf7e5b88c5d91f7366583dd8291bc66a485692983ced0363be7808f72db61eddbaa3eb85f8de478ecf831aa6562cb55277632837d270730654c88b44151fd3699a304d7b7d03899c1ea4569659ca1017b225437033236e1be40763eb5acf37539eadd27babeb14dc080593ae8995612bf73ddb0a3ac9a5e3a7928eb28c4226f5ad15e368a0c25cf850ca6305718f24bb523b3d249dcbe3ba31c47f62291d7f36bbc812c2217ff059790b595ea7d91bbd1d02c2d2ce2141059083a6869c255250318174527b8756f469ff53269bba29a920e273f1c6511f5664f4225a0c8f79c75fc738d8f2c2b6094963b12156124d75e76c6a9592dd20e8da8336892f92a862fcb5737f7c9e058cc0b913904391545a66d71a350e11db94694d94e4f4ce77d03bd3a87f8a11da54a44447fc301452f08cde472ba391e0a444bc1ee540f736f169633041f215979974c665e0a924d2417710dee44f87ba2a391c7eacb45e87322bcdb651720d0ba8275253f577f5ce7f44a43674ccdceb28894b466e50b4d45537e1ccce51a291774b120da0b981e07aad6c5b465900276f1860f43b488b83da83aca29181c94f417fff69e2f13438ed591cab714f22da50122ba3c2aa58b8ad844090c0d1f62d03d527a27d171714d68de967c7be47fad46d67f20720fb1d5fd33db6807bf8380156cac4dda80299f33db46a28975dc78b0b478c1861111b7f7c82819e3afe841eb0517b835d0c90bdb74e427febdc4dd7f5ecfd4a0b9297da7974600a1eae4a90a2446ad83a418973af8c989e858f92c782db457182f0ef00155b40d954c9b47a397dda6caa7aef0be5e4b9f7a2680c63d614f48e232f1191cfc2a994cd5efb108276e4a7c87ab8df88be55f33e7560ca10305981bb86d37913303a2f43146baabb93e19c9b06175bb860199f3ed4a8f64fd65622c09ceb8abaead7d849d29c46036ef75df5589345ffd72ce5b4ffd53358e3dac4a22897d78b2b98476c640ed265a5ca3d580b84bfdb6f4adb9a87e9c49653ea2ebf4e0cc1ec7142188a0b304b9ed07d739645a66f9b0052444c5fb279d5d63cfdfb274955bb40869ba897b7408654a633e17cce38824f655fcf8bf414a256d817b8af6cc23f3b90be0742d0b7c759039904254bc8bcfd76366b2df4bf84c4ae6757b408e93ae8559b514b98dc2b33fc9b93c076d67c8fe0e3b675a29f0d7ff709ff42ddebc159543695b7e4cd1ce9b5482f77798878da07a7b6a8f3645e175bd966305ae4a3213de01518ca150e583c89960e8760576a6bedb123c8a066da793283c20770bef8a21bb4d66e2dccb5b70f47a2de629b99df175ff40cd562821bbbac8c9acf03b6289ee2c0980c95bce952ca70a7ec8bb1a05524578c882dbc042ae23c60cc91983dac7e3bff34d6940493b0afb8aa3e47b7ab18b17a48bc831bb5ff1a102a1c4d91e41d9ba122793fb92e323404927266c1c5ce72e7d96c3a27409caa2a527923103755ec8fd94c44d3ef3edd75eaaba6f34f0602174e1fc950248411851f06737de23ea32f5b8a59a25679f1a746ada510fcf928c6a423b75c6dacbf4ff3590e1e2bd23a8462e0890344069000952a03d94012e38fdaaa1a33b0dac751e2fce8d41645f13995a8b8ef962affb3fa714bcfb36fa7d05ce043d9bf8a751e9cbb9833b0a775adf21e313713ad72dded5578f04483b13a4442b133ea2e69349e35352e9c765b148f4c4739d426555c138d59b96714538ab84cef3e94e99de9bb2cb5d0e3698002482c0f489f30f988292cbb377c7117223f0b3cb6d530ac2a73950610018da4f78db7a3e1111e92501ff1392356d3f2df0a0653f46b56ca0b8fce0abe3e29cd555d7f36677f5c215a05c1c3febacf3fb1162d2673833d3baf625bfdbf8d5a364db61e8d3ce66a2a71201f68b7ba41e11d0521b7479d7db34762972430b984b0795d08c9eb3dea7ae7c232be6deda7d65f36c9c890bbe373623fc0cac1d092e39b5723bdb337e626801ed0632f3f344ab0be6a5720474a33d8fee2c6e7210f08840b90ecef7d8ff15b8b2c9c7bea265a04ab72054b36668b5e9f46b9af85fc688e573df7f9635197e1bd783cdcd53579bf62a6a8209014814a0f44bb39ce7fee6899107978d4a360fe412588a39217223069229541dc61386a4721ced6ec42ef44eee4c23c0e780f0eb60d642d70059a7a5a1fc35f8d9da95153c629c816277c0f64b6ffa6cedbfea687316e5fd295b6557309735149bbccedfb9dff606ce6be6497ba31ca2432e5d5ddaa13a8c83ec48efa492a432c008a549d6db14cd545e3139634eae579c17255b9d968e9ff3c7c89d587201a87e804cd60e552f5b3ca27afab7b9db7cf89695e0de6c419d7d2ba21bb1083e247497b3586824e555de263963b181cadaa38f18a7693f3c3d059c5bcb7b2ed4a9c2cdff4a4893ab85e24babce524755941d6672088a31009b2698c43286161b8d42ab38aee964c4322d66f0f682b963e5b8fc88bbb5b147ea976503b58ecea38f359b20db9d959395b07b5244eaa69b8ff5f3f15bfb012135aad7d3397a028ac6a77bcad33fb2bf0a3db1a29b6a149a785e2f9ccdebd7f80ec79b2244c43f584805cc5b9c34d1251c962980e71825212824333f61aa6d56be18418fd7fc47116fac05d697ad3ca15266d364246ae2a3b61be509a55c6911820c814fd19ea39563c43dcf223c4879713cc91c9f90bfeaf76a9420a8f24e40db4f38b4ddcc1ff20e50b38cbba0b9651641e207040384d7a5c71ca9b54ef4a08974eff68c7e26faa1b6d805411aac4bd4890c312b571ae2b250714922762e718602483e176adc5314cb538a6f15364f09ca604d376e624a9aefaaad26b51b58b876d872d79cf5bed788f68b76e8232357db20a5bdc35cc57c8f4a54d2a4655436fa50c50a653e5902f7abdce6c695f981fc32bc4619fa98c0df2596a1560d801361d8a8cc05ec1d9bc073d090199f74df0cae24b34c5bcca37e15b06df5bf0a468fb93012116c42e73baad8b17d98dc1bec0d8f7e232007f8f09cf1366df013a1ab0e780520a0da7d90b1fb4607f9eb74f9cc789a41980f8223afa543392246a2cda1214d37c6d385b33973da88e9540e4735812f81e9c1353dae10675cdb46e80389d2ab97a8b797ad6d667f9163c1f5e8a5285ada2c7d97b8db34a3d7a94c3f9c51a98a9e59c361339d475877a58aae287d42f6d146584caa613469dc57d4cd356d7bfe3fac87be31a303164b9a7136dfaf3b235866cf6167a09ef4b6246129f336eb21ec970588498e949d6550ea3682a61f1852bad377696ab36618c6312019c165435d3588da6c18d480061b40ae7952cf2b8669d2d697482e8641608a0b451063b282f0eb013f9ef04e038854bac2e2fe1bb8adfc38db2d06d3b29fcd86f2c0460a81ade6ae73ba7030e92dfa50534daae319bb1839ad2d7ee61dff07b20f1c113cda99e1154f7f4cda145e3fdccc4d89397258eff8b9f29a1e48dfa76d4fd60d7e7692586e3a1345bda3fe2dadbb67ad3d8d3a5ed37db712c2e9a3e5ce773777c7fe6f9042d488fe70eb511a8808b9f13a4988502df554463aa7b881d9e6dd5a0e15c354a9ff371dd422416e15b03c717f8316514edbdb58520aeb24e526d63bba4a5307853a6de2b9a002f8ea352562423cce4a56f992b10acbd7d6ed7ec0be89f4a5cf9fcaf3d9c99d67d0fb8066f8d4a6a7cf7885193e899b5ed3b687ec296b2044405acd22bf17aa65b7652ceacd260f486c7b4b937095b357be4f0a87ec645a12aff3e3b714cd69ac20cab9ae065f05196ec6d40a5bc63e6a415b29fb1aafd03756d9ac7ebd978591df146134d05e98a63d5f2a00ed41991ea5ce96fc609ba6b5402aa291a318b624fa947adf55309f7e8a480b2b49b3adb6a0d9bb346dcedd68b8ef8478fd19bcd417df9befd2b85f0ef2b4f17acb379231f4e82a2a0628001d0e0367692ece23fbc6c90f680cdcf7d7f991570f9f7ab0692a719e82e708273baeffbb415beab5cce00c8a4f3116e7c7eac0616f10b962ed41953cdfaf009bff307df341eb29b05586ff6ac0b78fd04cf27901fe5db52072350669fb6538802d66011b882f89240d95b366c31082d1f0a6a8fb6c17753b0b8eaa9c170cbabe15d0b509df30d6e59e8e40f6299f3e1f2d89185e971e2c949bcd398b1ff263948ef4dadea98a62e27e18bbadf827a119a20eee22db05fff70f9d2424c4e7534e84a77cfe1a4ef0c9eed967b195171949a3ed1b58a96556b784abed54c0ead6de862dfe037b5c32e0a807f32665178789f5a1661d035e1b18c38727fbad2cac52402442333d55df95d10ec035b3637881ef15c7f6018877aecb69169f1ce6836e504633a49ccd4278dd16e5d94cbf7543860e2bb6cd04448d9b9b584301163086770abf495fdffb0b7d754a4e2d1af888ec2d26d13a7c92e1322f6ddcc5cfcd5324f6f1b11ed37ff68e87e543da7ae84fd27c42dc74db3a7548f2bc89a27d5ad5d976e115dd25b87834f6c4cffe5a4989086bca48baeafcaebc8b0c01b4b394e4eecd540c3760bc9464974d9f84f3980b64067af31d3226c1b534a0a7d76448e55afddb11e1f2af65ae75ca0ff2ebf79bbbfff30f6faf0248883ee4ef9ef9712bf896d0d36d76cf02d74f649c5b1feff04c4c02095f429a9c210330ef4115e7bee0cf4ee4db9ae4adf7d8e85bcc0cc4528fa04e42217eeffe3ba0a5bd954f0a2e", 0x1000}], 0x4, 0x0, 0x7) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) dup2(r3, r6) 20:36:02 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:36:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xf0ff7f}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1281.947540] loop6: detected capacity change from 0 to 4096 [ 1281.964022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:36:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xfffffffe}]}, 0x14, 0x0) [ 1281.993185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.994784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1282.020106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 20:36:03 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x600}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) [ 1282.055117] loop6: detected capacity change from 0 to 4096 20:36:03 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0xf}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) [ 1282.087899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:36:03 executing program 5: syslog(0xa, &(0x7f00000005c0)=""/30, 0x1e) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) clone3(&(0x7f00000003c0)={0x220000400, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0xf}, &(0x7f0000000280)=""/159, 0x9f, &(0x7f0000000340)=""/54, &(0x7f0000000380)=[0x0, 0x0], 0x2}, 0x58) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x62cc8) read$rfkill(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8080) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000080), &(0x7f00000000c0)=""/124, 0x7c}) [ 1282.131955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x7ffff000}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1282.164428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) [ 1282.187367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:36:03 executing program 3: r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xeb) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) fcntl$setstatus(r0, 0x4, 0x80c00) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0xc0081, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000900)="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", 0x1ba) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r1, r3, 0x0, 0xfdef) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) dup2(r4, r5) [ 1282.238893] loop6: detected capacity change from 0 to 4096 20:36:03 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r1 = getpgrp(0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r7 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@phonet, &(0x7f0000000200)=0x80, 0x0) kcmp(r1, r1, 0x2, r7, r0) r8 = gettid() tgkill(r1, r8, 0x2000b) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x5, 0x1, 0x7f, 0x0, 0x5, 0x20000, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffff8, 0x3, @perf_bp={&(0x7f00000000c0), 0x2}, 0x1110, 0xfffffffffffffff8, 0x29, 0x6, 0x0, 0x3, 0x7, 0x0, 0x7, 0x0, 0x2}, r1, 0xffffffffffffffff, r0, 0xa) [ 1282.248654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1282.282094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.443709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1282.484476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1289.577797] Bluetooth: hci6: command 0x0406 tx timeout 20:36:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x7ffffffff000}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:36:12 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000008, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:36:12 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:36:12 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x101, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/55, 0x37) 20:36:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x2000b) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xb3, 0xff, 0x7, 0xfd, 0x0, 0x7, 0x100, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x200, 0x1, 0x0, 0xffffffff00000001, 0x4fc8, 0x7, 0x0, 0x9, 0x0, 0x4}, r1, 0x0, r2, 0x1) 20:36:12 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x10}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:12 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x700}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x2}]}, 0x14, 0x0) [ 1291.803189] loop6: detected capacity change from 0 to 4096 [ 1291.809540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.815125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1114, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1291.849307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:36:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r3 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x7, 0x40, 0x20, 0x2, 0x0, 0x120000000, 0x1000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200)}, 0x4000, 0xffff, 0x2, 0x5, 0x97c, 0x800000, 0x4, 0x0, 0x4, 0x0, 0x7ff}, 0xffffffffffffffff, 0x8, r1, 0x10) r4 = syz_open_dev$mouse(&(0x7f00000001c0), 0xffffffffffffffff, 0x40800) sync_file_range(r0, 0x8000, 0x8, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000340)={0x9, 0x8000, 0x3, {0x5, 0x7}, 0x83, 0x80000001}) read$rfkill(r2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x1f, 0x1, 0x6, 0xff, 0x0, 0x29, 0xc8921, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0)}, 0xa61, 0x4, 0x10, 0x1, 0xd, 0x100, 0x7ff, 0x0, 0x12, 0x0, 0x9}, 0xffffffffffffffff, 0xd, r2, 0x2) 20:36:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x4}]}, 0x14, 0x0) 20:36:13 executing program 3: syslog(0xa, &(0x7f00000005c0)=""/30, 0x1e) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) clone3(&(0x7f00000003c0)={0x220000400, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0xf}, &(0x7f0000000280)=""/159, 0x9f, &(0x7f0000000340)=""/54, &(0x7f0000000380)=[0x0, 0x0], 0x2}, 0x58) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x62cc8) read$rfkill(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8080) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000080), &(0x7f00000000c0)=""/124, 0x7c}) [ 1291.949001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:36:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x8000000000000}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:36:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1292.086389] loop6: detected capacity change from 0 to 4096 [ 1292.120219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x8080, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) [ 1292.134738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.137006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xbec2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x2000b) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1300, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x9, 0x8, 0x3f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x1, 0x3, 0x4, 0x8, 0x8000, 0x1, 0x6, 0x0, 0x5, 0x0, 0x3}, r1, 0x1, r2, 0x12) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) fallocate(r3, 0x2, 0x0, 0xfc2) 20:36:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x6}]}, 0x14, 0x0) 20:36:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xf0ff7f00000000}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1292.255478] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:36:13 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x300f, &(0x7f0000000080)={0x0, 0x1, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x18000) readahead(r1, 0x1, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000200)=""/10, 0x0, 0x0, {r2}}, 0x58) [ 1292.365601] loop6: detected capacity change from 0 to 4096 [ 1292.421719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.514381] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:36:22 executing program 3: syslog(0xa, &(0x7f00000005c0)=""/30, 0x1e) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) clone3(&(0x7f00000003c0)={0x220000400, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0xf}, &(0x7f0000000280)=""/159, 0x9f, &(0x7f0000000340)=""/54, &(0x7f0000000380)=[0x0, 0x0], 0x2}, 0x58) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x62cc8) read$rfkill(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8080) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000080), &(0x7f00000000c0)=""/124, 0x7c}) 20:36:22 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x11}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:22 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x200000, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) 20:36:22 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x900}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) 20:36:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xf0ffffff7f0000}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:36:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x8}]}, 0x14, 0x0) 20:36:22 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='cmdline\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xff, 0x0, 0x20, 0x1f, 0x0, 0x5, 0x80000, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x6, @perf_bp={&(0x7f0000000080), 0x5}, 0x48, 0x1, 0x3, 0x7, 0x1, 0xffff, 0xfff, 0x0, 0x3, 0x0, 0x8001}, 0xffffffffffffffff, 0x2, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1301.670000] loop6: detected capacity change from 0 to 4096 [ 1301.704877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1301.707035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000100)) [ 1301.729638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x14}]}, 0x14, 0x0) [ 1301.743000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:36:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500), 0x8}, {0x0}], 0x9, 0x0) 20:36:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x600}]}, 0x14, 0x0) 20:36:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x125800, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40000) 20:36:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x1400}]}, 0x14, 0x0) 20:36:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x8}]}, 0x14, 0x0) 20:36:22 executing program 5: ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0x5) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1301.934939] loop6: detected capacity change from 0 to 4096 [ 1301.988007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1302.025497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.033380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.055632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:32 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x40, 0x20, 0x20, 0x1, 0x0, 0xa011, 0x4, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4b6, 0x0, @perf_bp, 0x188a8, 0x1, 0x9, 0x5, 0x7, 0x6, 0x8, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xf, r0, 0x8) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1, 0x8, 0x7) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) creat(&(0x7f0000000280)='./file0\x00', 0x0) 20:36:32 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x12}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:32 executing program 5: syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:36:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x2000}]}, 0x14, 0x0) 20:36:32 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0xf00}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x8}]}, 0x14, 0x0) 20:36:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500), 0x80000}, {0x0}], 0x9, 0x0) 20:36:32 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffeffffe}) r2 = signalfd4(r1, &(0x7f0000000200)={[0x6]}, 0x8, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f0000001700)=""/167, 0xa7}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/49, 0x31}], 0x4, &(0x7f0000001680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x40000020) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000440)=[r2, r0, r1, r0, r3, r4, r1, r5, r1, r0], 0xa) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000180), 0x80000001, 0x10000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x20010, r6, 0x8000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) fcntl$setpipe(r6, 0x407, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1311.500210] loop6: detected capacity change from 0 to 4096 [ 1311.518550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.521177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.533630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1311.586569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.832243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.848662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:44 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x14}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:44 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000001c40)={0xe03, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000100)={0x0, 0x3, {0x8, @usage=0xd9, 0x0, 0x16a, 0x7, 0x1f, 0x6, 0x1, 0x11, @usage=0x4, 0x9de, 0x6, [0x0, 0x7, 0x3f, 0xc5c, 0x73ef, 0x3]}, {0xffff, @usage=0x10001, 0x0, 0x8, 0x8863, 0x7f, 0x2, 0x8, 0x2, @struct={0x0, 0x8}, 0x401, 0x0, [0x3, 0x2f, 0x8001, 0x1f, 0xfff, 0x8]}, {0x3, @struct={0x4, 0x8}, 0x0, 0x200000000, 0x9, 0xca, 0x100, 0xfffffffffffffff7, 0x5, @struct={0x9, 0x62ad}, 0x5, 0x7d0aa176, [0x2, 0x40, 0xff, 0x4, 0x9, 0xff]}, {0x800, 0x200, 0x2}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000c40)={r4, "5b0ddd90b66fb9ade8b6aee8ed63e481"}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, r1, 0x5ebd7000) r5 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) fstat(r5, &(0x7f0000000500)) 20:36:44 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1100}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = inotify_init1(0x800) pwritev2(r2, &(0x7f00000002c0)=[{&(0x7f0000000140)="09ded1572ddf67b9885fbce2c8fa1e13a016a3647a5e59babc83f5ead3c92ed17413157739c2de2d277365ff5ada8aee03dc093e78b7003ca15c95da6686f93a5bb2e7c61ec2b6ef0965c6035e2bd54de30782021cd32e3208fb3e0e414d24ed2718944f7fdf15c0802aacb6a0cf64376de3e929a288e6f5b72665", 0x7b}, {&(0x7f00000001c0)="9729288b54f43ee31b4a32e3891530b5a114dc5cc2ff414a8fa7639351f834d6ace26c09a8bacee2bfd22f34d4ee0e4306e492a714b60ec64c6cd4a7079139c5fa5d4de29980aec20c1b8e6a751806a446424792cdea0069e53a440c861701e4cd676b6b8317935737af5cb320525c394d692dd886c69e20132acc646485db506277633722", 0x85}, {&(0x7f0000000280)}, {&(0x7f0000000380)="f7f81cdd602355c8a6d7779afaae4af9c33820509157995beb8aaa361e995b6182c3c4d35988d1674d2b9a96243005ea4e1b948d20129d1b3bf5e86e865caff213bf619faec00e210a71a52d02196f79b83aef2491850539489d79c7be52f787b2d30246e59e8c9f0e1253f59f22e6c814dbab7d448ccffb7a2d33221c4b753ebbbeff67efff43c729a6d7883e8699bad7f8ddb5444dddb53605d3590f88831fe60bca5dc03e0a90e82c62700dd09939950100548f0b0cc1cd49a3356937db3dab70c8885e86bcffa68884dbe23b4cbffe6443392cff0018776f66ed84fa533504640daf16", 0xe5}], 0x4, 0x8, 0x4, 0x4) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x4c, 0xc, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x20008000) 20:36:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x3f00}]}, 0x14, 0x0) 20:36:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x8}]}, 0x14, 0x0) 20:36:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500), 0xf0ff7f}, {0x0}], 0x9, 0x0) 20:36:44 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x280c, &(0x7f0000000180)={0x0, 0x959f, 0x1, 0x3, 0x1e4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) r1 = io_uring_setup(0x6f90, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xdfef7ffe, 0x123, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1323.262075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.309532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.322332] loop6: detected capacity change from 0 to 4096 20:36:44 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000000c0)) 20:36:44 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/35) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/217) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffeff) nanosleep(&(0x7f0000000000), 0x0) [ 1323.384612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:36:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500), 0x7ffff000}, {0x0}], 0x9, 0x0) 20:36:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8001, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:36:44 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x3}, {0x9add}, 0x8a, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="7a7c9ca7cc75b713a0b5864c16d4cd49592e13358508338fab04b9a6eb2358ecd2d3952485602a5af6afefc4993f2d90ff80da56098a9231e4373822a68742907e5df44c1881ae66222437ac4286ce51c3e54ba1d0b8c779efabf7eb2b1b5fee02a3296d4d2088af48549ac768f62d6d2f481495f8db41dc5ddb77b1b07c2b5de687fd98e45cf9b577de1b92c2d563bc6ea2d2b570b9ef56da23", 0x9a, 0x0, &(0x7f0000000180)={0x2, 0x8d, {0x0, 0xc, 0x4b, "d5cff972564ffe01ca54fb03eb36821a2d0ab8b825816885c66e22a07f7d900e6a6bb3f75a3604c1dda0d16f43b24375ac9bec4a4b78063df473f17fac499e254837cb5de5446ae3c35745", 0x35, "5b929bf86fc902433c7a52f370c369fd9834dfb6650856eb9441dcff11a687e436727dd9903e416f0154461e61cb4f1d7046dab798"}, 0xc2, "a15698a54ecba0ed282c47d34bff923534d2466e4b6567541cc7b3afa648396fffe78e8fcb7a81b100e0f97fc94252603b32b70e4e7435782d4b656c96659e91c9e65c87c2f31dde1a0776919da9c0a2905d4d6450d8ee2b2305ee90e8452726c9da46b8f71363aed0c038004a44f1515a592266899da3418c9f936e9c516fa226447cc5b02424c7145b876489803fc2fbb4d5ba0171dd80dece71ced92b6efbf25281699e3edd888e0378e3446ecfc1a7717f72f73e64b184d53f7d42904218fd56"}, 0x15b}) fchmod(r1, 0x0) 20:36:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xff0f}]}, 0x14, 0x0) [ 1323.527589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:36:44 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x6119, &(0x7f0000000180)={0x0, 0x3fb3, 0x10, 0x0, 0x3d8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe, 0xfffffff9, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1323.568445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.621129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:44 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1200}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) [ 1323.645915] loop6: detected capacity change from 0 to 4096 [ 1323.671927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.675505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1323.730624] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.978100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500), 0x7ffffffff000}, {0x0}], 0x9, 0x0) 20:36:54 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x15}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x824c7) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x1, 0x600000) dup2(r1, r2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2cb91c06", @ANYRES16=r5, @ANYBLOB="0100000000000000000011000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10020000", @ANYRES16=r5, @ANYBLOB="000208000000ffdbdf250c0000000c00018008000300000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f300000000008000300010042d100000000000005007f63020cedbcfa622e6179b673c558d12625c145131e86c6327921f184f00f6e407d1c0ce61972b611584712ec3cf000a06c1ccda9abc412401e2bac4c668d40f31912c66eeeba42b442861d7c35bc43e2215896544d7d6c2b110783a7f30a77243bb0d5881dccd0e0d41f5c20fd4331d507cddc9e4a47ef7e6181c49d52beb02bb3b16e0589e1fe6aa6cfa841ea32f51c3425c7aed8ca70b6e281b65a474909dbb596ad8fc1e748254a305eb1afcdf4cd900351af259a267dfc1d5d2bf7ad32b28e83cbccf0046f3c1815ad058d7c1a5d61ef6e2122e0e75110c095ea4bdc905c553b9f8dfe5f45bce98171e49369b3d000038004000100c80003801800018004000300070002007b5d000008000100000001002c0001800400030008000100090000000800010001000000060002002a0000000800010031d2179b040003002c000180110002002f6465762f7573626d6f6e230000000004000300050002000000000008000100ffffff7f540001800400030008000100ffff0000110002002f6465762f7573626d6f6e23000000000400030009000200232d5c210000000004000300110002002f6465762f7573626d6f6e230000000008000100ffffff7f23d6821a1d00ecb4c74b763ff5157ecb52743bb39e4b1b7ca591eb152228614c0d8aacf035bbbf591fed335adc03319e10f72f7d4191556772145438df96fdc76263cb334b172b8bc27e3879b5a98d7892d6e491f2b4ea3ec6cdce04010735b82587238b6fe9e528924ec6ecc0dbf13f1b8f0de8701852f3b725fad57fdbd5d398de65480159c287080a60e30ee1ab824603cb"], 0x210}}, 0x20000000) 20:36:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x80000}]}, 0x14, 0x0) 20:36:54 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000081002c000800450000300000000000019078ac1414bbac1414aa030490780000000045000000000000000900c7030000000000000000"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 20:36:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) io_uring_setup(0x2da5, &(0x7f0000000180)={0x0, 0x935, 0x20, 0x1, 0x382, 0x0, r0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:36:54 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1400}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:36:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000050000000500080000000000edff080055ac0f00040028000800090005ac0f00"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x11) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) fdatasync(r1) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81001f8b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1333.617220] loop6: detected capacity change from 0 to 4096 [ 1333.640278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.658766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1333.673526] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.683275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:36:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x200000}]}, 0x14, 0x0) [ 1333.735462] loop6: detected capacity change from 0 to 4096 20:36:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0x81, 0x91}) r1 = socket$inet(0x2, 0x800, 0xffffffff) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0x0, 0x8, 0x5, 0xd3, 0x1, [0x5, 0x9, 0x10000, 0x1]}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) bind$bt_sco(r2, &(0x7f0000000140), 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') [ 1333.765029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:36:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500), 0x8000000000000}, {0x0}], 0x9, 0x0) 20:36:54 executing program 3: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/70, 0x46}], 0x1) move_pages(0x0, 0x69, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000080), &(0x7f0000000000)=[0x0], 0x0) r0 = syz_io_uring_setup(0x39e9, &(0x7f0000000080)={0x0, 0x8d73, 0x1, 0x2, 0xb5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0)=r2, 0x1) 20:36:54 executing program 5: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) 20:36:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x8125, 0x4, 0xffeffffe, 0xfffffff8}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:36:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x1000000}]}, 0x14, 0x0) 20:36:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0x81, 0x91}) r1 = socket$inet(0x2, 0x800, 0xffffffff) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0x0, 0x8, 0x5, 0xd3, 0x1, [0x5, 0x9, 0x10000, 0x1]}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) bind$bt_sco(r2, &(0x7f0000000140), 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') [ 1333.836412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.908253] loop6: detected capacity change from 0 to 4096 20:36:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x5, 0x80, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/198, 0xc6}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000300)=""/125, 0x7d}, {&(0x7f0000000380)=""/111, 0x6f}], 0x6, &(0x7f0000000480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x7, 0x81, 0xff, 0x7, 0x0, 0x8, 0xb0420, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0xa}, 0x400c, 0x1, 0x7fff, 0x2, 0x9, 0x3, 0x8, 0x0, 0x1, 0x0, 0xb07f}, r1, 0x3, 0xffffffffffffffff, 0x9) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) openat(r0, &(0x7f0000000580)='./file0\x00', 0x1, 0x0) [ 1333.953110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.971351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1333.999582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1334.047473] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:37:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500), 0xf0ff7f00000000}, {0x0}], 0x9, 0x0) 20:37:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x20, 0xfff00000, 0x1f8}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:37:04 executing program 2: sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x58}}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x4, 0x0, 0x0, 0xbc001, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/15, 0xf) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0) 20:37:04 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x16}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:04 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1500}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x2000000}]}, 0x14, 0x0) 20:37:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004001) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:37:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xffffe, 0x0, &(0x7f0000000200), 0x4000, &(0x7f0000000480)=ANY=[]) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000500)='schedstat\x00') read$rfkill(r1, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x22200, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000480)={&(0x7f0000000200)=""/150, 0x96}) setfsuid(r3) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x21084, &(0x7f0000000300)=ANY=[@ANYBLOB="3d66e9457cae7ecfb852", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cachetag=\'\\]{]$^-[:@:%(\t}%^,fscache,version=9p2000.u,privport,cache=fscache,cache=fscache,euid<', @ANYRESDEC=0xee01, @ANYBLOB=',fsname=ext2\x00,fsmagic=0x0000000000000001,seclabel,pcr=00000000000000000039,euid>', @ANYRESDEC=r3, @ANYBLOB=',dont_hash,euid=', @ANYRESDEC=r5, @ANYBLOB=',fsmagic=0x0000000000000006,smackfsdef=,\x00']) [ 1343.430076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.440106] loop6: detected capacity change from 0 to 4096 [ 1343.459047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1343.484456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500), 0xf0ffffff7f0000}, {0x0}], 0x9, 0x0) [ 1343.532994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:37:04 executing program 3: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x80000) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x1}, 0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) fcntl$dupfd(r1, 0x406, r3) fork() 20:37:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x4000000}]}, 0x14, 0x0) 20:37:04 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r1}, "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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "48e6b5", "18f271", "265d1c", "3ce879"}}}}, 0x20) [ 1343.612220] loop6: detected capacity change from 0 to 4096 [ 1343.638550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1343.707996] Bluetooth: hci1: Unable to find connection with handle 0x0000 20:37:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1343.735962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.748486] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:37:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x2000b) fork() syz_open_procfs(r1, &(0x7f0000000080)='fd/3\x00') ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 20:37:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x6000000}]}, 0x14, 0x0) 20:37:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0, 0x8}], 0x9, 0x0) 20:37:04 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x17}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) [ 1343.827075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:04 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366805d8600080801000240004000f8010020004000", 0x1c}], 0x0, &(0x7f0000000140)=ANY=[]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = msgget(0x3, 0x446) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r4, 0x0) r5 = getpid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, r2, r4, 0xee01, 0xffffffffffffffff, 0x8, 0x9}, 0x0, 0x0, 0x3ff, 0x1, 0x5fe2, 0x54d, 0x2, 0x9, 0x2, 0x81, r5}) chown(&(0x7f0000000040)='./file0\x00', r0, r4) [ 1343.865142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:04 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1600}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) [ 1343.931474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.171321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.242537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:14 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1700}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:14 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x18}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0, 0x80000}], 0x9, 0x0) 20:37:14 executing program 2: set_mempolicy(0x5, &(0x7f0000000040)=0x40203, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) syz_io_uring_setup(0x343b, &(0x7f0000000080)={0x0, 0xf6e1, 0x0, 0x0, 0x30}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_open_dev$tty20(0xc, 0x4, 0x1) 20:37:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x14000000}]}, 0x14, 0x0) 20:37:14 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x12, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x2000b) r3 = getpgrp(0x0) r4 = gettid() tgkill(r3, r4, 0x2000b) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r5, 0x0, 0x0) clone3(&(0x7f00000005c0)={0x200200000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x26}, &(0x7f00000004c0)=""/240, 0xf0, &(0x7f00000002c0), &(0x7f0000000300)=[r1, r3], 0x2, {r5}}, 0x58) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) close_range(0xffffffffffffffff, r5, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:37:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x11, r0, 0x70fa6000) 20:37:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="000000000000000000000000441356bbe0d347458781d90fbb6137b40100405f6df5", 0x22, 0x4e0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)) [ 1353.177554] loop6: detected capacity change from 0 to 4096 [ 1353.180569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.195112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1353.218477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.252794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.487486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.531417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x2a85b138}]}, 0x14, 0x0) 20:37:23 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0x80, 0x5, "f803b1c4278ad29b7f7362cfea308a27f1cbbc7c023f91a445c7ba34d6e25d0a7683e3d5a188c1b4bade9ad5d6b795dbd76df501dfae1f83507ea203500ad7", 0x1d}, 0x80) shutdown(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x80, 0x40, 0x0, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x40, 0x40, 0x200, 0x5}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', r0, 0x4, 0x5, 0x0, 0x5, 0x3, @loopback, @remote, 0x7, 0x7, 0x4, 0x8}}) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000440)={'syztnl2\x00', r2, 0x7800, 0x7, 0x3, 0x1, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0xb4, 0x29, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}]}}}}}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040c1}, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000640)) recvmsg(r4, &(0x7f0000000a00)={&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)=""/108, 0x6c}, {&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f00000008c0)=""/153, 0x99}], 0x4, &(0x7f00000009c0)=""/20, 0x14}, 0x2060) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@local, @in=@local}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000b40)=0xe8) getpeername(r3, &(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000c00)=0x80) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000c80), r6) sendmsg$TEAM_CMD_NOOP(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r9, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40110}, 0x4000000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000dc0)=0x14) 20:37:23 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1800}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:23 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x19}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0, 0xf0ff7f}], 0x9, 0x0) 20:37:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x24465, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@privport}, {@afid={'afid', 0x3d, 0x7}}, {@version_L}], [{@obj_user}]}}) 20:37:23 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/8250_mid', 0x10000, 0x100) r3 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x4, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f0000000140)="0f2e8fb29a68017fe2616e912ac03af8aa1752fdae5ee6c84e60e0ac466a79e58353a14c691fcd7602f2ceb8a7f24189c5e59f6e2f9a029130d9a6159e49ae415030301f12a83d5f88b84589076da6a29ca9cd5798065167df37d7bc8ab53bd67e3175b9d84a34d7deca3ec9", 0x6c, 0x8001}, {&(0x7f00000001c0)="ddaa62921961e5", 0x7, 0xfffffffffffffeff}, {&(0x7f0000000200)="9e725b89b06e8bae468502d605d4588ede6b0daad4560dd0e28946a09f72eb7ab3624e543b77b05b", 0x28, 0x200}], 0x102006d, &(0x7f00000002c0)={[{'.'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}, {@audit}, {@dont_measure}]}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000300)) pwritev2(r1, &(0x7f0000001440)=[{&(0x7f00000013c0)="75e0784236f7729b4848501a9d1d96d7c532a3bd0d6f328590279f2d92932bc7fcc5bbc2ac622d3d04900bde022dfe181319f93ddc8ba673681e57bfbc5abfbbcfd5bf00464a2e82c1b06e7ec47d5bdb3f7bfcc70045d858324450139016fa1154dcfc4545d9cb034b50c81f9ba22018734329", 0x73}], 0x1, 0xf52, 0x80000000, 0x3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f0000001700)=[{{&(0x7f0000001540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/69, 0x45}], 0x1, &(0x7f0000001680)=""/102, 0x66}, 0xba2}], 0x1, 0x2, &(0x7f0000001740)) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0x2, 0x4, 0x4, 0x7, 0x0, 0x6, 0x8800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000001480), 0x1b}, 0x4000, 0x6, 0xffff6206, 0x7, 0x5, 0x40, 0x3ff, 0x0, 0x7, 0x0, 0x10001}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0xd, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @private=0xa010101, {[@rr={0x7, 0x1f, 0x1c, [@broadcast, @broadcast, @broadcast, @empty, @dev, @local, @private]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00W', 0x0, "944856"}}}}}}, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0x7, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001780)=0x40) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) 20:37:23 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0xc, 0x0, 0x3e, 0x8212c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000008, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/mei', 0x181402, 0x20) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000002c0)={0x0, 0x9, 0x7f}) [ 1362.391143] loop6: detected capacity change from 0 to 4096 [ 1362.407084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1362.430308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.447815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x38b1852a}]}, 0x14, 0x0) [ 1362.508464] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:37:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0, 0x7ffff000}], 0x9, 0x0) 20:37:23 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0xfffffffffffffe82) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendfile(r1, r0, 0x0, 0x8001) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140), 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @local, 0x3}, 0x1c) 20:37:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20, 0x9}, 0x901d, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:37:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x3f000000}]}, 0x14, 0x0) 20:37:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0, 0x7ffffffff000}], 0x9, 0x0) [ 1362.680229] loop6: detected capacity change from 0 to 4096 [ 1362.699212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1362.717580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.738689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x8cffffff}]}, 0x14, 0x0) 20:37:23 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:37:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xbcb2e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x62cfd) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) pread64(r2, &(0x7f0000000000)=""/82, 0x52, 0x3) [ 1362.786351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:23 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/8250_mid', 0x10000, 0x100) r3 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x4, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f0000000140)="0f2e8fb29a68017fe2616e912ac03af8aa1752fdae5ee6c84e60e0ac466a79e58353a14c691fcd7602f2ceb8a7f24189c5e59f6e2f9a029130d9a6159e49ae415030301f12a83d5f88b84589076da6a29ca9cd5798065167df37d7bc8ab53bd67e3175b9d84a34d7deca3ec9", 0x6c, 0x8001}, {&(0x7f00000001c0)="ddaa62921961e5", 0x7, 0xfffffffffffffeff}, {&(0x7f0000000200)="9e725b89b06e8bae468502d605d4588ede6b0daad4560dd0e28946a09f72eb7ab3624e543b77b05b", 0x28, 0x200}], 0x102006d, &(0x7f00000002c0)={[{'.'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}, {@audit}, {@dont_measure}]}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000300)) pwritev2(r1, &(0x7f0000001440)=[{&(0x7f00000013c0)="75e0784236f7729b4848501a9d1d96d7c532a3bd0d6f328590279f2d92932bc7fcc5bbc2ac622d3d04900bde022dfe181319f93ddc8ba673681e57bfbc5abfbbcfd5bf00464a2e82c1b06e7ec47d5bdb3f7bfcc70045d858324450139016fa1154dcfc4545d9cb034b50c81f9ba22018734329", 0x73}], 0x1, 0xf52, 0x80000000, 0x3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f0000001700)=[{{&(0x7f0000001540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/69, 0x45}], 0x1, &(0x7f0000001680)=""/102, 0x66}, 0xba2}], 0x1, 0x2, &(0x7f0000001740)) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0x2, 0x4, 0x4, 0x7, 0x0, 0x6, 0x8800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000001480), 0x1b}, 0x4000, 0x6, 0xffff6206, 0x7, 0x5, 0x40, 0x3ff, 0x0, 0x7, 0x0, 0x10001}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0xd, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @private=0xa010101, {[@rr={0x7, 0x1f, 0x1c, [@broadcast, @broadcast, @broadcast, @empty, @dev, @local, @private]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00W', 0x0, "944856"}}}}}}, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0x7, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001780)=0x40) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) 20:37:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0, 0x8000000000000}], 0x9, 0x0) 20:37:33 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1a}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:33 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:37:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) read(r0, &(0x7f0000000000)=""/41, 0x29) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x7, 0x5, 0x4, 0x0, 0x9, 0x420, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf3d, 0x3, @perf_bp={&(0x7f00000000c0)}, 0x10221, 0x1ff, 0x7, 0x7, 0x7, 0x1, 0xfff7, 0x0, 0x400, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r1, 0x1) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1, 0x2}, 0x6) 20:37:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42, 0x90}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r9) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r9}}, 0x81) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x0) fork() syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 20:37:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xe4ffffff}]}, 0x14, 0x0) 20:37:33 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1900}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:33 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)="413b7b543a9895", 0x7}}, 0x0) sendmsg$802154_raw(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="159cd73e5683478f832ef942190d1637de7b1993e15a87306dba8691b776b3a15663d3c9975cf718b6517f2a7e919564eceb10e131acb80d2f044406254d7426c0811286c9b2c4e7b4138cc3d718345f005d4eb6c3383a52142d78c3e0f7ff8a32a577b632279cdf98440a7b43558913a348d317e533a6c8fc85051963468c789cd43701b65540ac91a5ada2b25afc40e170a89586809b2c483a38500609921bc636a913bcf31660cadb27960da5fff821d6fdc6ae1b0856e5028fb7142dba96c718ca2b8e", 0xc5}, 0x1, 0x0, 0x0, 0x404}, 0x48010) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r0, 0x0, &(0x7f0000001640)={&(0x7f0000000500)=@phonet, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000580)=""/8, 0x8}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001600)=""/55, 0x37}, 0x0, 0x42, 0x1, {0x1}}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') sendmsg$802154_raw(r0, &(0x7f0000000380)={&(0x7f0000000240), 0x14, &(0x7f0000000340)={&(0x7f0000000280)="316075a8481d19b2f73a008c5a933de1a0f073163d3815ce41e7fa5c93f9f1623ec723f6b573ab56b2ecf6ad87033ade5d057357f410feb3a572a078cd5b70509d4f94d4810a6b007b491dc9fed6448def056583a3ed89185c4f", 0x5a}, 0x1, 0x0, 0x0, 0x400c4}, 0x44004) read$rfkill(r1, 0x0, 0x0) bind$802154_raw(r1, &(0x7f0000000200)={0x24, @none={0x0, 0x1}}, 0x14) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) fcntl$notify(r0, 0x402, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) read$rfkill(r1, &(0x7f0000000400), 0x8) [ 1372.877460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.892295] loop6: detected capacity change from 0 to 4096 [ 1372.899438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.907373] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1372.909033] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1372.910182] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1372.911195] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1372.912429] blk_print_req_error: 214 callbacks suppressed [ 1372.912469] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 1372.915099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.916073] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.916133] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1372.918410] buffer_io_error: 214 callbacks suppressed [ 1372.918427] Buffer I/O error on dev sr0, logical block 0, async page read [ 1372.930002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.930982] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1372.932217] Buffer I/O error on dev sr0, logical block 1, async page read [ 1372.950849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1372.957607] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.959346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.960371] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1372.961590] Buffer I/O error on dev sr0, logical block 2, async page read 20:37:34 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000080", @ANYRES32=0xffffffffffffffff, @ANYBLOB="05000000000000002e2f66696c653000"]) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3a, 0x400, 0x70bd29, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x10, 0x0, 0x0, @u32=0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1373.012415] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:37:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xf6ffffff}]}, 0x14, 0x0) [ 1373.042973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.044081] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1373.045465] Buffer I/O error on dev sr0, logical block 3, async page read 20:37:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0, 0xf0ff7f00000000}], 0x9, 0x0) [ 1373.093185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.094199] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1373.095416] Buffer I/O error on dev sr0, logical block 4, async page read [ 1373.119893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.120950] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1373.122173] Buffer I/O error on dev sr0, logical block 5, async page read [ 1373.147938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.148859] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1373.150097] Buffer I/O error on dev sr0, logical block 6, async page read 20:37:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xfbffffff}]}, 0x14, 0x0) [ 1373.175005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.176159] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1373.177560] Buffer I/O error on dev sr0, logical block 7, async page read [ 1373.187328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.231746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:34 executing program 2: bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000049c0)={'syztnl2\x00', &(0x7f0000004940)={'syztnl2\x00', 0x0, 0x29, 0x40, 0x6a, 0x0, 0x4, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x80, 0x7, 0x100}}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000017c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f00000017c0)={0x11, 0xf7, r6, 0x1, 0xfd, 0x6, @local}, 0x14) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f00000017c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004a00)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004a80)={'syztnl2\x00', &(0x7f0000004a40)={'syztnl2\x00', 0x0, 0x700, 0x8, 0x3ff, 0xffff, {{0x7, 0x4, 0x0, 0x13, 0x1c, 0x65, 0x0, 0x5, 0xce319c51877aae3c, 0x0, @rand_addr=0x64010100, @empty, {[@noop, @generic={0x9e, 0x4, "96e4"}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000004c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7fe}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0xd0, 0x0, 0xa00, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x8040) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 20:37:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0, 0xf0ffffff7f0000}], 0x9, 0x0) 20:37:34 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1a00}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:34 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1b}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xfeffffff}]}, 0x14, 0x0) [ 1373.386310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.386495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.408102] loop6: detected capacity change from 0 to 4096 20:37:34 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write(r2, &(0x7f00000004c0)="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", 0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1373.450558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:37:34 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42, 0x90}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r9) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r9}}, 0x81) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x0) fork() syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 20:37:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x2, 0x0) 20:37:34 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r0, 0x0) r1 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, r0, 0xee01, 0xffffffffffffffff, 0x8, 0x9}, 0x0, 0x0, 0x3ff, 0x1, 0x5fe2, 0x54d, 0x2, 0x9, 0x2, 0x81, r1}) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0) r8 = syz_open_dev$loop(&(0x7f00000004c0), 0x6ad, 0x8c1) r9 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) r10 = memfd_secret(0x80000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="1de40e79d8f17647edae5cebe5564a0bf926399304225133d88bd54d6dc5a830d4f19258224e2ce30a8e82ae3ef2236e38a5feb309ef77198e084dc570949c5f9e5fe42e3cdb493da531d1d4f10254588531b095718704ad861da263929bee5c199ac4fbb2c9f42dbf1ad5d349aa03d142d41ed7755341fa68e7f9c42359004e7a0462c0adb7accd9ded9aa37151d77f5749f813523b7bbb97e6d2957067b731efeee9a2f565d8b1d5f22460d56bab4b9e08c9bbd589c665e49245e1470be57a04c5dde300ae772eec79224187173015827f95676fba0b09cf", 0xd9}, {&(0x7f0000000200)="7ff6296b459087e486b5d311ec2bcc5cdf66c1760b161049ad2504ba326952cd7496b8902d6e8a74c523fcbea20c0a14cea83443d1f437b49595cb479a7a2e67c43670bc84151f71293a60372b985f5131caa7f62f7691c3683cc608f17c8577bc61a3a72a7a", 0x66}], 0x2}}, {{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)="967c16990a74438b4afcb7f39a81d981996f259ede9d33d6ad8b210eeb5506ac6d6b9151b46f57628fb125d698749303888b386c0acd90a873411ecacaebf864e96e124b22cce8e0c2a93d02642a4ab78ac35ff3c61ce448118d13ce9de20ef387cec030de6a43", 0x67}, {&(0x7f00000003c0)="b6caf916dd31634cac915bb971ac0deb78", 0x11}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000000000001000000024d0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x4}}], 0x2, 0x4002410) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:37:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xff0f0000}]}, 0x14, 0x0) [ 1373.590031] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.599605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.600914] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1373.602490] Buffer I/O error on dev sr0, logical block 0, async page read [ 1373.617310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.618290] Buffer I/O error on dev sr0, logical block 1, async page read [ 1373.636110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.642884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.653991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.655246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.660421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.665885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.685202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.693520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.694249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.708205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.709544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.724296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.726571] loop6: detected capacity change from 0 to 4096 [ 1373.737825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.738881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.753412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.758728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.797065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1373.877518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:37:53 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1c}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:53 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000080", @ANYRES32=0xffffffffffffffff, @ANYBLOB="05000000000000002e2f66696c653000"]) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3a, 0x400, 0x70bd29, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x10, 0x0, 0x0, @u32=0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:37:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xffffff8c}]}, 0x14, 0x0) 20:37:53 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1b00}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:37:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x4010, r0, 0xae289000) 20:37:53 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="010000001400000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0x4, 0x1}, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:37:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x3, 0x0) 20:37:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2801000000000000000000ffffac1414bb0000000000000000fc020000000000000000000000000000ac141400000000000000000000000000fe88000000000000000000000000000100000000000000000000000000000000aeb1010a60991fde47b43defb9f75e2059713d34732cc8ac543282e0a5901756476304cef2a5ef4cf2335d428780c0f6e553c6c1eeab2ca1483dc9ee0372b0f214243e13c878674f2abf24ab02d7ed278200"/185, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000001000000000000ffffffff00000000000000003c94723a2f05cd5b000000000000000000000000f0adc42ba5530f5497e794aac7907d1932e25e90820ceaa5cb752f16f7318ffa39f231cd885c27b37814d5be1cdd8d6ca2bf86bfa766917f031ae8179ab64bc26aed7a3730e2a3a8d1347419bcaddb933733ce1bec335f905b1893195035b78783f57375e6b6e8b938662e3b1415f9cc25ab9f41"], 0x128}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r0, 0x1) [ 1392.517872] loop6: detected capacity change from 0 to 4096 [ 1392.539181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.540373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.544261] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14790 comm=syz-executor.2 [ 1392.564523] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1392.644058] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.854893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.857972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:04 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1d}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:04 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1b01}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x4, 0x0) 20:38:04 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:38:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xffffffe4}]}, 0x14, 0x0) 20:38:04 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000011c0)={'syztnl2\x00', &(0x7f0000001140)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x4, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8007, 0x8, 0x8}}) sendto$packet(r0, &(0x7f0000000140)="5baaa4a203bbcb77136807233ae3fc3ce8edf3c147618b1d5c58c348467fc92d4b7143e08a706aae80ba926ffa8ee3cbfbb8bb5397500170cf3c944c9174c37c716ebcf903ca8c16ccd987cbd4a90a3677e4d693afaadf85f15ae04bc3fe61c75136176f1232fa3884217dadc80d626ed03bd4908d51e599e9d3f124432e1a8dc0da86db09f6b42d0a334032c8794209731fdd8db7126d118166a268363b35f483ca5fb59a342e8644e2716b998d792f38cfbf9224e373e4fbb40aa67bdb44e2f430d37c1b5ddef75850999535da1627c901d80a9be427674bed9a94b05e4be5ed614bc24b2b3756185e8f1fe151fae6ebf5834fa7caec398a7035d9cb93fdc1540c5e04d7f4bae2702e3d89c08f90761c1e9ac8b803d2e824665dee18f49f39a0c0cda6ab1716db5a86b3d6501416dd633c9f74614f66a00429b7f938077524f51587ba77c1c7c4a06779e034338cc43284fcdf3c62368ec9aa8e371a0a780ed653d678184d535d1c102dee13426151fa226f00d0977c003b0ce1dbc695a5c07365cec1fb08feab32848ce4527481efe367bc5587827e34a75e2ae443489a16fb0e2ccfb7ba27e33a02be2048f8199671d2dcd6e0be0b735a9f06142bb233041681317c599774260ccecc3cec1977569d6d0da208b812de1cc0de2ae8396209c709614dc982d680629efa4df4090c3815d40fd91f524f4949a732eacdd5b6072cad9448b191d0988168fbac93daae9fd32bb132222c2aeb1c29a79f469b45f1d4a0c520794a40b27a640ae09ea3b5ad14bcbaf22d19e94ddda38037700ea720e2bde64b915f3f7b20d6c9f9906845e7220840a18ff0859a17e27e24794e2ae76ed726009a08d949f7d1cec91b164660fcca141edaa46bafb6e059746ddc6fadc33d02f9703a46fdbbcd7cdc69a961a1792eb96612fd78cde8c7d01d5916f1f25da060bf2014984b0e2e29ff8d4e7e12fad2a2dc7a9740193d1b4d821faac06bcc8841ee09daf69094d74dce218e210440eb11becd3e315ef9fef20f6b06a7383024481699bce61c125df2a7a42b42d629a597185f379458e70406318929fe9002758aaa0e4ed9942cbb13cc784604eed6eb40b82c2476cc4d8c0f7687d7bca3cfa6a7cc900024833cb5bfdc7a5cc30ef2acab6004a0b28c9f15f8bb3eea89a30e607e051e656f01ab6dc362886af49315660d8d167d99c9ec55b0958c8e2999f4800d17954ad3f5c8546c3fb409c5460509a0de036df1fdb054bfe6beba4fe621c970c036f07fc53569b6a98984bad2e962b16449d7da4a2672c6b4e3dfce56b600e93027dac2183561a80551e5da23765a7f9c2257a261f69d664309065d5465d14aba2acef45c296b0961c481fcba8e3c89118685db319c76b21364c74e946a0ead0dc6cce964e286e24584ecf58b9fed79d09818f18d7b3d4235ef3e413ee556754fd2871bcf5ba5254f2aa3c06f62df4c6a6919c1333432cf3e7fac4a1b700768994fa04b829b1ac8fb90fe2e5a10dd49af85a2df41431adfa715dd668a1853fa75e3db21142a9a62edc44b229f771e399e586eafb9a9de5790373e712040aaafbe1fe6161b31e701436f3a2dfcc5a5b32f44bf35ef1f70f4b2dbfafb99e7cb29192944206b62bb355e8a736864a3dbbc9ed91f3e5d69b6a027b831a49d90cfae43c38852fb21ef6b571c28c6f15ff6a17921ac75dafbb38622537bcc49fa9d5b1aa5fca19a33c467825a4f67591e7af0245e957dab3c83df773e342ebff89135f94ccc8396ff18521bbdc568c8c32374bf0b3f9ad22bb3a33c5b75df532cffad9ae43064ffbca43ccf846d503c108732f0e612a059eaa82845f9eb0f8df8a3cd55455faa550a8100f1cca0b08b0682c636d780fe45818e2a340138375e7f58f3e36c6bbff29e35c183d257b49030af6b59ac7733091931cceb16c3db251501c947ec3102db75bcabd0d63b2d480c8062dbe395b364a7415d891b2cddfda36d714330694371a5de4c6e0f9e08ed46922c2ebadbd0bf805a767348141677c422e1db044921e9ca2d182992adc4ba039d5dc5c15d513e50d284f8e646c2ba716c0e37c3f5a23e2e67f33b2c18c1d2529a7c5f8796fa51eff3ab253caa3688238f3a2615de5ab314f32c69fbf8071722aaf57fd12717a909c6cd35fa8c1c1ec8ad549c9acd57cf33d4b8f521369956aeab9cd0f187925a9c22e845d6e1c2b60e5b415cbedb6ecac5f309edc6f5a59dc981b553db219146ccbd9464b81b351a99b3908d02c1e4e1cb64d3ae20f7c3d64cf9298cfc5df93a2fe06bb1c2149599e6a5fe3ee0c8468eaf3e80f78fd7323e04616c3260ad65360d45fa2a7c21569e4f741ab17c2f184e7e703cee874986eedbed1df7e610aa868c8585624b7629204140070f09dbeffa5ae2473bbf6ab48e96fdc03949b403cac822bd506803ce0564b25b7dabd77883265216f4331443885f259c52f7f9e4c2ae221acf3527b2a99e7cb4a5a3a7015c0d24513699a50eda64df2e1445533bc469b51ae59aa09597e7d0edb90724223898751dea5ec17d7c146a2675480fa85283baf60c70ed7f93f309c641cc9222c51e04a443953e3ae130fe80a0f23b86ab4da56b4721f5b59e2fff7b021f5eb7905f1ed8522a20e3f83e0e739bcc9c9310946fa02f24004befd6f9930ebd605db5df6bb0ef1e1250a6201995e55081223037d78479e29e652be2d1b7b1920a036fb70e36c7cb2dac5d2015aaf1317b7499dca8a43d26bea80647cfd08963a50249bc4d0958b9ff0659d0ad99b4863de4092b27ce5efe9b8fc98f6044ad6b4c8f788673f2948b954cda86c68e3f135f3b20c484db31201111e7f5d168ccbb3a6b8aa0fa912a6d3d15f83bcaaa6e80746782b68398994ab01dd2fc45ba335d663d05f182dfac925f5a99344496ae175962730b1d6d0330217cefe922a1ea6aeb4dd6ba77f5222432c0d22e6f694dd8c6e411b8ca29e1edccc75d716b24957f4dee9b9f7a0e6640280cd748247e4c293608c1562c54d3de473faca592aa0d69236cc6e44d64c166bd56f99b72ca84964fbafad8c8b187d1e1c85f01627553c1bf4be72441c44a6f883b2eac972492d22351cf2c4c72efe200474610b0a3adb2165c3ffdb057c535e995f4ff705bcce65ce0322a27fecb6c4f99ecffcfec7a7dcdcc9348ac1e5d3631d9932afc92a55ad0829dbd819e6eb6e2349b4fa0780a6e2cadba900072637ba7ffedd412c84edd66c0f70f265ddda0965e563943d9b44a706ec165febe5703fe3eb3d0bd7f03e760300628afd247b06164bf4c90c241858fdd88c62111a01774a9dc14857599e34fadfbf9d5462a49d7db5e4ee2140df4da23f1350a00c387fca62b3da07f6ae9ba115851ba5fa906d6c0f3a835de86704c6fa0367417b3955bc35316cc07f31c1176ef81db59d5afe550490361b49617b815d9fe7d0b47c50cc3f95d8103678f476b988c8f88e63f24266b2e279a44f18ab4b1ee059e9d10c6f98555834c6f494626f1ae9edf7bc580d96bee927f182d4412c09eda171dddbdf6b90594b43cfc9ffe036bcc2500fb9b5cbc64e1ad24b05e403aabf448699c623f54b1fa92a986e2c58962343e982223ad46bca59c2bf4e0af7c45187e16dda7f02f04d3f860f12e799ae9345cbcf392c7ce14146aeb4f76d8b77a1a435ddcfc3ceb85dad0d5a1c1afa20da25331b2295b9fad7d5231d34eda4ef68a00b3685ed01728f95195815c5cda74cea34a73a4cfa271f7d3dcd127c003db3066f208616ff4383ee3f5e0d3bf7bbea37848d4114aac76b8b672df6ae8316676fe7e0770b87fb96daf8c5dfbc9cea3285ef9138c6a3464821782b57ee30a129af6c90f4cfb6e8fad74c37bf94b0bde42d97ce44f739f17ff91b593b50d0b3e135f46381b7a75deb8171568e73eea884f61e9ffa61cf81b7be875fc478622443017958937ca085489748048022d6d861ee42b6ae3a94f0554a745bfe322c339bafa7482b718acb717728388d512d9a444e3eb667694effef04d752dbec2c246079192edcc26f2caa6b9c5bcd21496381889f94010988b8bfde53f014e7c40a37f06ced9b21730b176cc2f979446e9755368a04ac7b5095b02ad9b05f01ec1d83325a749b2589f60f0fbba3c022de8b2ad7717546c20bc85fa806985be5c869cd04490bc7eed5f32eb519ac28d66e107aca14755e3ce0662ce7aa46680ecffd8a3ebe6f5b9b7a7d4e3ec003dc6d734c47243fd9fcf40a4a46e34e50fea9a8180f5f56ed8a8a3896b1ff3aec60aa58ee697e80e2c89657ed7924f2ece7ec13c67949626f5c29f797a1ee378bd68e013b2cd1657b9afa2f830eecd660bfdb31b7225bcf4f26369fed351c4f18be6d4d1611935bff45c23073f3730a0c79a95b0b4bc61c1a85c2f9a84b32d49142bc12e8e6c088d2d4a898ad478cb6a23fd0cbf8b8182255c7f654a851da76b21c7d7de75e21728f186f9d3d64da2c01046108b02f46a45483bf6b9dc53629fca7f8a07f534f0183a11816cb3cbdc4b3115b9a703f50b54149058a69655d0212b34606928ef02f7ba181d9bdc841c25e89cdb5c6c076009a625fbf700b363fb00c35a61cd7cee5f8ac45c289fa7bfbd27fdc9b2652b654c5e0fc478e2886315b8cf655925f83dca8023551a422192d218ae3b0b04e415f07ee4091eeb871fac29984d6464c68daab35ff604fb91a198f6a172f3ada99725a3b51e32a6a4b1485f5608915e4ca1a044650281fe650757a798f113e4c15f6dda6fd202bf564c998705851e0015a56068c4544b156d2929919b4e065ea50191c5f852dd1449f9146c516a93de6facec0905cf6b9f2c63674f448a11986f569ae00933b0eb49d02a96231fb5cfe5dfd1bbdc2af5aa2ac88f5d8c41d10e87c7dee560044c136d90981e45acf1c08cef4b65ad1be3a47c94d16fa77504e82ebddba9d149cf11a8b4b4b92f8551b0d4a8aad05c2f56f9ae4f69eb1e853294f3233811e364bc199b62fcbf55e67b5fdc43b9b97fcb497363f2e9d3155602296a89fa486d82870594bc545f7e9042b8a52c6bd34deb6bec652b862d169725084fac82646a06cbe7e892de5fcdd53765f1a636f5e459c3a1da89c133fad8898654ba7a49e7ef6da1f113cd614c27d8aacdd08bf73feda9940f841b174941edb3973c9a22073ece6af9e5e79271ae01d475fdbb4068f183cbe1af04111f6dddb99a639f4f7304a2bd631eee4d2315ec2bce2e4bf6041072e71be998c52cd4d37131a7882deb76afa9d774ddbb1fbbd03e1615f5286febd8c4ded7b4952b05377343b24bcacbf7a1014ce8b6984786eae60057af61a2a41f1cb469c4facaba87451b1af0e5c7160baa5b4d19e876257b67840c5d49934f1787f5e7931279fde9716b3158491126629e43841e1e347f7ef22b61431365095f0c22b9a4f13bdbfd4918afd390ce45eb1f50602b49877865a2f6af3747c093a673a7a6badb297f3b63ca3d0546b95d3c4b05f042919953fe82c41e3a9d9e01318f33c32c7c9d572cbdc0bd4f70005ed830b4bcaeb364aea6b44042eff9190b39600b92db8804645caa6b9aa1705f9b97277d290e5b1ab0cc295a3ba80452f50207c4bac5873f37faae8b3c09bac806d0c834b4719d4b4bd4e917920f4c82368c1cd30105780926197640a8dbed7b4cff21bef3430500bfe3a61f30bc51993696ce64b337fa23591f593d9b38b995529069eddf00e81a808a6d24ecd6cc10bdc03672ebaba62a4834032f62f2be4edf6385188e05d8be6abe7561b6960565f4ca", 0x1000, 0x48081, &(0x7f0000001200)={0x11, 0x16, r1, 0x1, 0x1, 0x6, @local}, 0x14) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYRESOCT, @ANYRESOCT=r3, @ANYRESHEX=r2], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800058, 0x0) 20:38:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0x1000) lseek(r1, 0x5, 0x4) 20:38:04 executing program 0: io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1403.192975] loop6: detected capacity change from 0 to 4096 [ 1403.215716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.217982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1403.228978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:38:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x4010, r0, 0xae289000) 20:38:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xfffffff6}]}, 0x14, 0x0) 20:38:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x5, 0x0) [ 1403.304042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:38:04 executing program 3: pwritev2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0xe3, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x5, 0x1ff) sendfile(r0, r1, 0x0, 0x86b09) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000100)) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='caif0\x00') 20:38:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1403.459336] loop6: detected capacity change from 0 to 4096 20:38:04 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f00000000c0)) ioperm(0xd667, 0x4, 0xffffffffffffff01) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1, 0x42188, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x41d0, 0x1, 0x0, 0x8, 0x1, 0x20, 0x8, 0x0, 0xfff, 0x0, 0x7d}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x30000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm(0x8, 0x1, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) syncfs(r4) 20:38:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x6, 0x0) [ 1403.526465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.529384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.539828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1403.633464] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:38:04 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1e}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:04 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1c00}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x801, 0x1ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000c40)=""/4088, 0xff8}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x340, 0x0) read$rfkill(r3, &(0x7f0000000180), 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) close_range(r0, r2, 0x2) 20:38:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x9600, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:38:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xfffffffb}]}, 0x14, 0x0) 20:38:04 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/158, 0x9e}, {&(0x7f0000000140)=""/12, 0xc}], 0x2, &(0x7f00000001c0)=""/50, 0x32}, 0x100) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) [ 1403.763222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.802162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x7, 0x0) 20:38:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0xfffffffe}]}, 0x14, 0x0) [ 1403.856388] loop6: detected capacity change from 0 to 4096 [ 1403.959025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:38:05 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x0, 0x6, 0x3, 0x3, 0x3, 0x3, 0x6, 0x11f, 0x40, 0x54, 0x88e, 0x7, 0x38, 0x1, 0xccaa, 0x7f, 0x7}, [{0x70000000, 0x7, 0x8000, 0x1ff, 0x707e7aff, 0xa8, 0x7, 0x2}, {0x6474e551, 0x6ff1, 0xffffffff0000000, 0x4, 0x102000000000, 0x1000000, 0x200, 0x1}], "36e093330aec47767e5767f711f430fa2b99d3cb1d6ef420b70665446ee1da2b2eb9ab3732d71e8a69192829f353d0014cd36c8ccbeb720d02ae4cfa1a677100157345f97cb95be260c7a98eae151883bfe1f4752fdfbdf7d458cb38cbd04939aa9b5c413e57954c5abaa1c126acf173c406b0cd0a7ac510abdf5b1f3999971191516d25fff7d240961472331915620f0a8733ef3363655092d2d8337fe83624338c52b3475adccca84cf078289d990a66e958702ce597665ada138b9419bdeb2ad0eabb8084b8e4f5e875f4d522145e75e45b6264be9814717a77f027f9762f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x890) r1 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x2000b) ptrace(0x10, r3) r4 = fork() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) kcmp(r4, r5, 0x6, r0, r1) 20:38:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) [ 1404.062585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.079323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x8, 0x0) 20:38:05 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x21}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:05 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000180)="9f64dfab7475aa8763efe9617cd826d1511b070d878f122e77ab2b51d879263ed5fcddb36ea2da941331f93d38073c2947689677ca8a16581701f66e13a5def81ce640e14d5cb7be72a71f51fa0becce40e587374b70ca77b0b3fd84e352568e3bb730116869b9fc3f124ab5a509b398d034c586f0") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1404.146147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.158142] loop6: detected capacity change from 0 to 4096 [ 1404.179575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:38:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x8) [ 1404.238859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.276201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.586162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x2}]}, 0x14, 0x0) 20:38:16 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1d00}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:16 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='}[\x00') pwritev2(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="b7154077b8b91cd628d602dc1d63713eb7c53c4a6d43cf9b4e16aa3a98c32b29754115625abe9624cb4bb62ddb5e7b90cbc6454d10a2ab659c77aeb015c35f8c6e0b082348db8e7a4d28ca1b8ea14569326437472dd558ccba9b180d62a1a65b2f1ac690b67988db1a376502067dbd3d0f5f3e8b183f46ce5e3763548880359a7149fc028d88c61c956848ec6265ddb3eaf467d1572777779ae8319238018134c8a0547717573b3d8ce29a78c503a1f8ba75", 0xb2}, {&(0x7f0000000240)="0b0b000df575ba112bd5ce9e1db920643280c7027e43db055da9836acc262ce705267f8c85f6d630aa55ce2daf019cfda78805028e815fe622c5481fcde768cedafc91d65a19dad41a050cac929a35dd77ebb05a5028229ab4d1a04ffcf37202b039b156793caca5148697258494482cdae4e08a2b2b07218fbaf88d56c117eb4bc05ace7a0dce90d53083606bf58fe1ee0db145e101c188e3a05af93fb4a4f4e8c5a52e9839b9021c3060bb9b7e2a69004966", 0xb3}, {&(0x7f0000000880)="0b8b6e007dd27b5606230c36c730629f6e2c9e95b69c1bfaab86c9de020e5abb6029edc98e3d4842f8394c6e07fa2f25990bc7ef97c89bb28da39188551eaee222cc3964502e5d98bca6d0e68abaace198f2195664defc372986c77112d933832d7c7b768508b90fa3d29a5dcb16693730bd49d6a6afd20dd0f0aa5df9004694bd4e99de77ac9f3bd805d4135cfc7fe72935df26f91fbd44c1a5705124a94a7e0146fe2abcdcc4b1772bbc9bfa32ebf2479f38c98742f5c038d3af5420b8fc958556", 0xc2}, {&(0x7f0000000440)="cc4747e8d0", 0x5}, {&(0x7f0000000480)="149c3a171ef29c8a3808693e2f6af8a94f43833e04c7483f5b0ad53de2e2ada0f83e3ce635969658703ab76d5d10beed7c3174571c735be725f7e5eb6d399c987d9b2d5bceb69876bfe8ddb1c4b9300213e7907bcca72f607ce2680b4d322f7a79bc0bd02388793799466c8bd3c7c7bc30c54bb33a513022fcffe2df63fc5e42f037bb44c47395936af4ed4e352fac01c11faee716b05766c41c874f69cd95d0493c870caeb115e8cf04bb9c2c99b6f3335e5699969bfdc19b17a365f76722f7e232d8ccbfcfcea61801", 0xca}], 0x5, 0x2, 0x7d7f, 0xe) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x2}, 0x5) read$rfkill(r1, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x80, 0x5, 0xe5, 0x7f, 0x8, 0x0, 0x1e2, 0x200, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000600), 0x1}, 0x40000, 0x6, 0x7ff, 0x2, 0x10000, 0x1, 0xab7, 0x0, 0xffff, 0x0, 0x3}, r1, 0xc, r0, 0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f00000006c0)="5591053d699012e172f0687de7d4e667712492552159fcac9bc3af515ffb7f59c6e54b0ad28bc8625d73e7b5499cafeacdbb1daac8b11d65319da78409a23adb6d507e3dea89495e171fd61131963dfeccddda27791252b38cdc84eb4f3592c8c83bd8a1f475fb584ba410db94d1d39fab45e12dd15286", 0x77}, {&(0x7f0000000740)="6350eac6a552cd05d870bbcc07b5d16b6f20ba57c6959eb8daa88736a5a3b3606f73c233930c1a10a05604b5aae74aafde479fd34617e649b2dc6793f3d367d4355478740ad1174a0eab9f42d5f1fa428c426fef1f33fddfee5968fe921d9d9f3465354dde71dddef96635f486e3ea3ae686455f3c5714db8467c41564f476ffc9565acf4f7e004dd32daf1ae5537363a38f7f0601f50a61689e18285892a16465005c946871d0a97c570c75569e98006b2072d3d030f6909c99acca7a74a61deba3ac0e787454042eb5095fc95a193570fa588f48df57e79e58571cc82f953477f6ff35dd8b23b978f997", 0xeb}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x5d, 0x3, 0x7, 0x1f, 0x0, 0xc4a, 0x6006, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x442c, 0x8000, 0x80000400, 0x3, 0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x23}, 0xffffffffffffffff, 0x9, r1, 0xf4576bc1d36e6399) 20:38:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x80000) 20:38:16 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x98) 20:38:16 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x22}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:16 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000200)={0x9, 0x0, &(0x7f00000001c0)=[r2, r0, r3, r0]}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:38:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x93, 0x0, 0x0, 0x0, 0x0, 0x50004, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x2000b) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) sendfile(r3, r2, &(0x7f0000000100)=0xfffffffffffffff8, 0xffffffff7fffffff) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x4d, 0x1, 0x7, 0x73, 0x0, 0xa234, 0xc2400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x5, 0xffff}, 0x2023, 0x101, 0xffff, 0x5, 0x4, 0x3f, 0x81, 0x0, 0x8, 0x0, 0x6282}, r1, 0xc, r2, 0x9) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/kexec_loaded', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x8000000) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x1) [ 1415.926007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.926498] loop6: detected capacity change from 0 to 4096 [ 1415.932093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="05cf2365f25ec87284bd59c4938c35af084cb10e54e2d71a50e7a83960cf0b5b4b1d8a60230d61a8c37ae74b70afbfc840688d8ed107b4c032355721b0d4eb742d18137f26e80a1d8dfe70b93fa74c1c46633723a032f01117e15456318a9f07db5a382aa445a0f186c57349ced104518a6238ef339656fb807864f92dc8816d462d0e3ae27faedb10446703500cc71068bf37cce70ba63ce6e295266769d3096dc5f4aefa3765db2bce13bbda7dfa5716fdb3420df002035248401e0285aef5f0caf7c29b333d39ef9d52308400000000000004", @ANYRES16=r1, @ANYBLOB="010200000000000000000100000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 20:38:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0xf0ff7f) 20:38:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x8000) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 1416.039516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:38:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x7ffff000) 20:38:17 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xeb, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000002, 0x200}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xec, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x3) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x81, 0x3, 0x2, 0x8, 0x0, 0x7, 0x22160, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x77fc, 0x4, @perf_config_ext={0xf19, 0x3f}, 0xf7cbcc902364b82f, 0x89, 0x4, 0x8, 0x3, 0x2, 0x8, 0x0, 0xcbef, 0x0, 0x1000}, r1, 0xb, r2, 0x1) read(r0, &(0x7f0000000080)=""/187, 0xbb) [ 1416.217039] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.244187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.250786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:28 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='}[\x00') pwritev2(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="b7154077b8b91cd628d602dc1d63713eb7c53c4a6d43cf9b4e16aa3a98c32b29754115625abe9624cb4bb62ddb5e7b90cbc6454d10a2ab659c77aeb015c35f8c6e0b082348db8e7a4d28ca1b8ea14569326437472dd558ccba9b180d62a1a65b2f1ac690b67988db1a376502067dbd3d0f5f3e8b183f46ce5e3763548880359a7149fc028d88c61c956848ec6265ddb3eaf467d1572777779ae8319238018134c8a0547717573b3d8ce29a78c503a1f8ba75", 0xb2}, {&(0x7f0000000240)="0b0b000df575ba112bd5ce9e1db920643280c7027e43db055da9836acc262ce705267f8c85f6d630aa55ce2daf019cfda78805028e815fe622c5481fcde768cedafc91d65a19dad41a050cac929a35dd77ebb05a5028229ab4d1a04ffcf37202b039b156793caca5148697258494482cdae4e08a2b2b07218fbaf88d56c117eb4bc05ace7a0dce90d53083606bf58fe1ee0db145e101c188e3a05af93fb4a4f4e8c5a52e9839b9021c3060bb9b7e2a69004966", 0xb3}, {&(0x7f0000000880)="0b8b6e007dd27b5606230c36c730629f6e2c9e95b69c1bfaab86c9de020e5abb6029edc98e3d4842f8394c6e07fa2f25990bc7ef97c89bb28da39188551eaee222cc3964502e5d98bca6d0e68abaace198f2195664defc372986c77112d933832d7c7b768508b90fa3d29a5dcb16693730bd49d6a6afd20dd0f0aa5df9004694bd4e99de77ac9f3bd805d4135cfc7fe72935df26f91fbd44c1a5705124a94a7e0146fe2abcdcc4b1772bbc9bfa32ebf2479f38c98742f5c038d3af5420b8fc958556", 0xc2}, {&(0x7f0000000440)="cc4747e8d0", 0x5}, {&(0x7f0000000480)="149c3a171ef29c8a3808693e2f6af8a94f43833e04c7483f5b0ad53de2e2ada0f83e3ce635969658703ab76d5d10beed7c3174571c735be725f7e5eb6d399c987d9b2d5bceb69876bfe8ddb1c4b9300213e7907bcca72f607ce2680b4d322f7a79bc0bd02388793799466c8bd3c7c7bc30c54bb33a513022fcffe2df63fc5e42f037bb44c47395936af4ed4e352fac01c11faee716b05766c41c874f69cd95d0493c870caeb115e8cf04bb9c2c99b6f3335e5699969bfdc19b17a365f76722f7e232d8ccbfcfcea61801", 0xca}], 0x5, 0x2, 0x7d7f, 0xe) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x2}, 0x5) read$rfkill(r1, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x80, 0x5, 0xe5, 0x7f, 0x8, 0x0, 0x1e2, 0x200, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000600), 0x1}, 0x40000, 0x6, 0x7ff, 0x2, 0x10000, 0x1, 0xab7, 0x0, 0xffff, 0x0, 0x3}, r1, 0xc, r0, 0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f00000006c0)="5591053d699012e172f0687de7d4e667712492552159fcac9bc3af515ffb7f59c6e54b0ad28bc8625d73e7b5499cafeacdbb1daac8b11d65319da78409a23adb6d507e3dea89495e171fd61131963dfeccddda27791252b38cdc84eb4f3592c8c83bd8a1f475fb584ba410db94d1d39fab45e12dd15286", 0x77}, {&(0x7f0000000740)="6350eac6a552cd05d870bbcc07b5d16b6f20ba57c6959eb8daa88736a5a3b3606f73c233930c1a10a05604b5aae74aafde479fd34617e649b2dc6793f3d367d4355478740ad1174a0eab9f42d5f1fa428c426fef1f33fddfee5968fe921d9d9f3465354dde71dddef96635f486e3ea3ae686455f3c5714db8467c41564f476ffc9565acf4f7e004dd32daf1ae5537363a38f7f0601f50a61689e18285892a16465005c946871d0a97c570c75569e98006b2072d3d030f6909c99acca7a74a61deba3ac0e787454042eb5095fc95a193570fa588f48df57e79e58571cc82f953477f6ff35dd8b23b978f997", 0xeb}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x5d, 0x3, 0x7, 0x1f, 0x0, 0xc4a, 0x6006, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x442c, 0x8000, 0x80000400, 0x3, 0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x23}, 0xffffffffffffffff, 0x9, r1, 0xf4576bc1d36e6399) 20:38:28 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='}[\x00') pwritev2(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="b7154077b8b91cd628d602dc1d63713eb7c53c4a6d43cf9b4e16aa3a98c32b29754115625abe9624cb4bb62ddb5e7b90cbc6454d10a2ab659c77aeb015c35f8c6e0b082348db8e7a4d28ca1b8ea14569326437472dd558ccba9b180d62a1a65b2f1ac690b67988db1a376502067dbd3d0f5f3e8b183f46ce5e3763548880359a7149fc028d88c61c956848ec6265ddb3eaf467d1572777779ae8319238018134c8a0547717573b3d8ce29a78c503a1f8ba75", 0xb2}, {&(0x7f0000000240)="0b0b000df575ba112bd5ce9e1db920643280c7027e43db055da9836acc262ce705267f8c85f6d630aa55ce2daf019cfda78805028e815fe622c5481fcde768cedafc91d65a19dad41a050cac929a35dd77ebb05a5028229ab4d1a04ffcf37202b039b156793caca5148697258494482cdae4e08a2b2b07218fbaf88d56c117eb4bc05ace7a0dce90d53083606bf58fe1ee0db145e101c188e3a05af93fb4a4f4e8c5a52e9839b9021c3060bb9b7e2a69004966", 0xb3}, {&(0x7f0000000880)="0b8b6e007dd27b5606230c36c730629f6e2c9e95b69c1bfaab86c9de020e5abb6029edc98e3d4842f8394c6e07fa2f25990bc7ef97c89bb28da39188551eaee222cc3964502e5d98bca6d0e68abaace198f2195664defc372986c77112d933832d7c7b768508b90fa3d29a5dcb16693730bd49d6a6afd20dd0f0aa5df9004694bd4e99de77ac9f3bd805d4135cfc7fe72935df26f91fbd44c1a5705124a94a7e0146fe2abcdcc4b1772bbc9bfa32ebf2479f38c98742f5c038d3af5420b8fc958556", 0xc2}, {&(0x7f0000000440)="cc4747e8d0", 0x5}, {&(0x7f0000000480)="149c3a171ef29c8a3808693e2f6af8a94f43833e04c7483f5b0ad53de2e2ada0f83e3ce635969658703ab76d5d10beed7c3174571c735be725f7e5eb6d399c987d9b2d5bceb69876bfe8ddb1c4b9300213e7907bcca72f607ce2680b4d322f7a79bc0bd02388793799466c8bd3c7c7bc30c54bb33a513022fcffe2df63fc5e42f037bb44c47395936af4ed4e352fac01c11faee716b05766c41c874f69cd95d0493c870caeb115e8cf04bb9c2c99b6f3335e5699969bfdc19b17a365f76722f7e232d8ccbfcfcea61801", 0xca}], 0x5, 0x2, 0x7d7f, 0xe) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x2}, 0x5) read$rfkill(r1, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x80, 0x5, 0xe5, 0x7f, 0x8, 0x0, 0x1e2, 0x200, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000600), 0x1}, 0x40000, 0x6, 0x7ff, 0x2, 0x10000, 0x1, 0xab7, 0x0, 0xffff, 0x0, 0x3}, r1, 0xc, r0, 0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f00000006c0)="5591053d699012e172f0687de7d4e667712492552159fcac9bc3af515ffb7f59c6e54b0ad28bc8625d73e7b5499cafeacdbb1daac8b11d65319da78409a23adb6d507e3dea89495e171fd61131963dfeccddda27791252b38cdc84eb4f3592c8c83bd8a1f475fb584ba410db94d1d39fab45e12dd15286", 0x77}, {&(0x7f0000000740)="6350eac6a552cd05d870bbcc07b5d16b6f20ba57c6959eb8daa88736a5a3b3606f73c233930c1a10a05604b5aae74aafde479fd34617e649b2dc6793f3d367d4355478740ad1174a0eab9f42d5f1fa428c426fef1f33fddfee5968fe921d9d9f3465354dde71dddef96635f486e3ea3ae686455f3c5714db8467c41564f476ffc9565acf4f7e004dd32daf1ae5537363a38f7f0601f50a61689e18285892a16465005c946871d0a97c570c75569e98006b2072d3d030f6909c99acca7a74a61deba3ac0e787454042eb5095fc95a193570fa588f48df57e79e58571cc82f953477f6ff35dd8b23b978f997", 0xeb}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x5d, 0x3, 0x7, 0x1f, 0x0, 0xc4a, 0x6006, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x442c, 0x8000, 0x80000400, 0x3, 0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x23}, 0xffffffffffffffff, 0x9, r1, 0xf4576bc1d36e6399) 20:38:28 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x4}]}, 0x14, 0x0) 20:38:28 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x23}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:28 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1d56}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:28 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:38:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x7ffffffff000) 20:38:28 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x8, 0x10, 0x0, 0x3f, 0x80130, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000003, 0x0, 0x4, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r2 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r1) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0x234, 0x0, &(0x7f00000001c0)=[r3, r0, r4, r5, r1, r2]}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) pwritev2(r6, &(0x7f0000000740)=[{&(0x7f00000004c0)="3b1c4d909e3355685ae24e43ca0d26692c304f45ae1c1da7f1d02e90d18ec86c023448e81888c1c86df589109c37b316c2fd4bcfed08b521cdcc6b4d72404b7e8a061228ff66ffaf7dca5219959a29d49caa7153cf7cb2697b666b56921ed370b062512c42e888013ba657b4eda206687dc0d677bf433ff9eda9a573f312a8acc9981ff23d47562f55bc52ca54d4f70e44e95e57d1", 0x95}, {&(0x7f00000002c0)="ac392cab9f4cd7151106bfb3a4c3ab7df05279ce8bd0591551970a24c1a6b94a7d3843d2c4231623f17aa8c9a48b87b6917bdb0ede", 0x35}, {&(0x7f0000000580)="4c58c073ab64c8d2b2a21a936a0f74a0ca452fe3a80cb139b0da17c65269e8da967c1b0c0e6ee4d911da8c318c15ab893d1b3309e2e9b29a387f55208f00490395cd6ec8c3d3a08ac4aad9e022445e1dfed5f0f7a07540a912d0a4c43bb3859dffb18be40bdaf1d711298eec31a919a7b3317ef67d9322c4e4e35d739a71da65931f86a93b10334c941f56c34473abc55ea6ebad44e711e8d1b4346f675f4bb645b4310f32ae9ef6", 0xa8}, {&(0x7f0000000640)="5d1a883b1217a51a65c93ec5ab4ad11d8cb4b83a47993ada1ee156171a2036a61a71bcddb7b2e4fa6cd65f6d7eca8678ee295173854439a67fbb31fb4af55d5eccbe6d99658fc038eca136962e75010e0a0dc7b29189f27330f7ba8d1e6419789516b138e935d2fa024c612de619fd664b0f9a563139a8a6fec1ce945a486d44908747be0f70a0162a17cca9484db6d2efbbd5a7e0311e6e2a5ca36b440ae313ebf1e22051bb31d4c0aff638ed68fec71d64868b691149d0f78e71276728c7e800e2bd", 0xc3}, {&(0x7f0000000300)="ebf3870abc7fe3e4a6b03684bbf7217f99438b12ac7177d4f8fbcdca75071581e1af25dd91798d2fe26220d06b", 0x2d}], 0x5, 0x800, 0x40, 0x5) pidfd_open(0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1427.691028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.699341] loop6: detected capacity change from 0 to 4096 [ 1427.705327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.751920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:38:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x8000000000000) 20:38:28 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='}[\x00') pwritev2(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="b7154077b8b91cd628d602dc1d63713eb7c53c4a6d43cf9b4e16aa3a98c32b29754115625abe9624cb4bb62ddb5e7b90cbc6454d10a2ab659c77aeb015c35f8c6e0b082348db8e7a4d28ca1b8ea14569326437472dd558ccba9b180d62a1a65b2f1ac690b67988db1a376502067dbd3d0f5f3e8b183f46ce5e3763548880359a7149fc028d88c61c956848ec6265ddb3eaf467d1572777779ae8319238018134c8a0547717573b3d8ce29a78c503a1f8ba75", 0xb2}, {&(0x7f0000000240)="0b0b000df575ba112bd5ce9e1db920643280c7027e43db055da9836acc262ce705267f8c85f6d630aa55ce2daf019cfda78805028e815fe622c5481fcde768cedafc91d65a19dad41a050cac929a35dd77ebb05a5028229ab4d1a04ffcf37202b039b156793caca5148697258494482cdae4e08a2b2b07218fbaf88d56c117eb4bc05ace7a0dce90d53083606bf58fe1ee0db145e101c188e3a05af93fb4a4f4e8c5a52e9839b9021c3060bb9b7e2a69004966", 0xb3}, {&(0x7f0000000880)="0b8b6e007dd27b5606230c36c730629f6e2c9e95b69c1bfaab86c9de020e5abb6029edc98e3d4842f8394c6e07fa2f25990bc7ef97c89bb28da39188551eaee222cc3964502e5d98bca6d0e68abaace198f2195664defc372986c77112d933832d7c7b768508b90fa3d29a5dcb16693730bd49d6a6afd20dd0f0aa5df9004694bd4e99de77ac9f3bd805d4135cfc7fe72935df26f91fbd44c1a5705124a94a7e0146fe2abcdcc4b1772bbc9bfa32ebf2479f38c98742f5c038d3af5420b8fc958556", 0xc2}, {&(0x7f0000000440)="cc4747e8d0", 0x5}, {&(0x7f0000000480)="149c3a171ef29c8a3808693e2f6af8a94f43833e04c7483f5b0ad53de2e2ada0f83e3ce635969658703ab76d5d10beed7c3174571c735be725f7e5eb6d399c987d9b2d5bceb69876bfe8ddb1c4b9300213e7907bcca72f607ce2680b4d322f7a79bc0bd02388793799466c8bd3c7c7bc30c54bb33a513022fcffe2df63fc5e42f037bb44c47395936af4ed4e352fac01c11faee716b05766c41c874f69cd95d0493c870caeb115e8cf04bb9c2c99b6f3335e5699969bfdc19b17a365f76722f7e232d8ccbfcfcea61801", 0xca}], 0x5, 0x2, 0x7d7f, 0xe) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x2}, 0x5) read$rfkill(r1, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x80, 0x5, 0xe5, 0x7f, 0x8, 0x0, 0x1e2, 0x200, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000600), 0x1}, 0x40000, 0x6, 0x7ff, 0x2, 0x10000, 0x1, 0xab7, 0x0, 0xffff, 0x0, 0x3}, r1, 0xc, r0, 0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f00000006c0)="5591053d699012e172f0687de7d4e667712492552159fcac9bc3af515ffb7f59c6e54b0ad28bc8625d73e7b5499cafeacdbb1daac8b11d65319da78409a23adb6d507e3dea89495e171fd61131963dfeccddda27791252b38cdc84eb4f3592c8c83bd8a1f475fb584ba410db94d1d39fab45e12dd15286", 0x77}, {&(0x7f0000000740)="6350eac6a552cd05d870bbcc07b5d16b6f20ba57c6959eb8daa88736a5a3b3606f73c233930c1a10a05604b5aae74aafde479fd34617e649b2dc6793f3d367d4355478740ad1174a0eab9f42d5f1fa428c426fef1f33fddfee5968fe921d9d9f3465354dde71dddef96635f486e3ea3ae686455f3c5714db8467c41564f476ffc9565acf4f7e004dd32daf1ae5537363a38f7f0601f50a61689e18285892a16465005c946871d0a97c570c75569e98006b2072d3d030f6909c99acca7a74a61deba3ac0e787454042eb5095fc95a193570fa588f48df57e79e58571cc82f953477f6ff35dd8b23b978f997", 0xeb}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x5d, 0x3, 0x7, 0x1f, 0x0, 0xc4a, 0x6006, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x442c, 0x8000, 0x80000400, 0x3, 0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x23}, 0xffffffffffffffff, 0x9, r1, 0xf4576bc1d36e6399) 20:38:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x3f, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r2, 0x8) 20:38:28 executing program 2: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x14c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fbffffff00000000001501"], 0x3c}}, 0x0) 20:38:28 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x6}]}, 0x14, 0x0) [ 1427.918164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.980626] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1428.019533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.022646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:29 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa800b0, &(0x7f0000000840)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="0000d936506255b69d37b9f2fe072c8fdf96584b2ee562fd0e25ebbd9412af05b3cdd536e98435f0220e2f7fdda63e2e7602f0aa7c4fc5898d7b17ade020c40d239f251033a5b006de0f0a03d3209dad26226ff370f6aae7314866228b693f4b263a1f7b0aa54572b18d444e90a7d50500000000000000f17284b00e443ba61368d64047ca37a77a4325915e01b01d3f571c05d1d343da09"]) syz_read_part_table(0x81, 0x8, &(0x7f0000000700)=[{&(0x7f0000000140)="114d357307be9a84d07388c2e924185d73d0c951853c3e733d2ec2dbb1a0a453f0525837b4bb6161d8b1d579bc9dfa28e61d60c31d1739dba7cadf7f8ab9cd99681a63d996a550dda7f7560375639ac8fa099e3810685eb9b555646441f6718b56343314e675383b7d931ccad97a99a7c52237a8e693f40be54b1bc5a2b05aea04fb70b9c55337723e6807e7c59deb24ab2484bf1a1b286f6e3a3e32e83a5dbfd06bf5d7affff607d2b30b46218c441cf1778bc8f85bd79323d05628f296d852987269ec4e3f10a02123c630850931", 0xcf, 0x9}, {&(0x7f0000000240)="83910abeea73f5accba0e3647b3c98fe91d6b1bd70bc139d16a25d8f6351ee3b23b9ff550393b4cf3439b2a3ad9c5ac22cb153b5027a00149d9e5571bd8613407fe3a2fb053716a39b31f46c8ca4ebfdb2a42315c1df9eecb7484ea57a31144662ced918cb99f0c5611fe57182f6de7a848d323e6f39ac5ec3ff5082dd5416b1be1c1423f9d44468b3f74482eca11b15d58516a709d4203a8d654311b1b03583959a918cbefb58d88eff5d0c7283149319a37aabbeb1b51b1f096b32902e70d555b0608bfade2d6b6c9e0f23a413d842412f24e75d9f6907de4b593d6429afbcc9b92d61c3dd31d6c44248", 0xeb, 0x5}, {&(0x7f0000000340)="c303b4c4696dbda7f6ae2afdc9381d9b3d47707888c617be51ace2109badd464219416", 0x23, 0x1}, {&(0x7f0000000380)="a7ed522c9543ad1a0afd886b2897840dcb46925a138d398f3fdebb696098aa0dc0293868f7f4da17", 0x28, 0xff3}, {&(0x7f00000003c0)="9fafa83cc479b2a0f4dae23b100c44db9aa7b0ea9c9ccdeb0d642043a6530ad05cd985ff174b4ddeabcc0dca1d763e78335d5c710435c4470d322ed44c86f6e512b1368f8f9de6e2f95dc627c70ed471de5a8912b3d983ba75c58e7eb79c48666c97e56d4c66067a995200751cbed0909b4e6fc16e5a2b496b82b58823ce0b27d3c0b3fda7b68f7041c73366a8ad5bb47b36fcf684884b9f95db93", 0x9b, 0x6}, {&(0x7f0000000480)="f8474d492c9d57cb7d89647f698adb708ea16edfc95774c358c2a36668f05001aa5c04442f351573eac2e3d66bfc2bc41c439e60c6fe778701c14a98ff57ed483468f6b8602c89cd87190f0fd6c3a169ed375d90b7327493bcf80b14f90e6948081818a148678ebfaa1056df3e48862340b3faafeca84cbf7bc59f8c49ddda2b7e62a80c59e18923067dd20aa4f90b7f9385551ade02aedf06bf6dca13983b5f0eaf2607afc55babd083460a0d0a259294d88b95d4fc85958fba9354b2bf6f90ffad2875b922a72c0ddc2332ce5dacce65be851700f640fa72e6e69eb4ae0b20dba1ffdd93d7a7", 0xe7, 0x6e}, {&(0x7f0000000580)="ddc721a18bd4d8f5bf78e8944e77c951bb129e8e5d6bd92340d645313d87ce348289d40b448475e6cadb96d6037e1df513084d2d907e7394cdc3f43494d8c5a6b20be7ff225ca08212f9e587e9433f6df3402afcff300556d25affafc1af13b60261caba9691024e0fd0dbb25752465d8db03b1254219f323bb2a73512c34686e44560881ad02da57dfcbc38f0daf55b8862", 0x92, 0x3}, {&(0x7f0000000640)="1ded46799b09706e2b7cb20ae24cb1bb8a8b9e5037531f0dcd1594f8996c0e78b0cd2df34b003254e9c7078b3d996f577eb465a5acb9cece59513e35c8d768d09fc7d8304d66207b9b49f560c686c76fb32f2e022a3732ce7d09d3f5abc34dc58f5c2417e70c6791e0d6c424a109d502ce8c01e635d30f226c64078384319e1c8786bd062dd152646fec2149d23068a1f8738e97a91eb3a1cef0da86ded676", 0x9f}]) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) symlinkat(&(0x7f00000007c0)='./file0\x00', r0, &(0x7f0000000800)='./file0\x00') 20:38:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x8}]}, 0x14, 0x0) [ 1428.223984] loop6: detected capacity change from 0 to 4096 [ 1428.253572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1428.329908] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:38:38 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1e00}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0xf0ff7f00000000) 20:38:38 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = getpgrp(0x0) r2 = gettid() migrate_pages(0x0, 0x8, &(0x7f0000000840)=0x80000000, &(0x7f0000000880)=0x7) tgkill(r1, r2, 0x2000b) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x9, 0x9, 0x20, 0x0, 0x0, 0x29, 0x3045, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x4, 0x7fffffff, 0x0, 0x1, 0x100000000, 0xfff, 0xfffc, 0x0, 0x8, 0x0, 0x101}, r1, 0x3, r3, 0xa) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) pread64(r4, &(0x7f00000004c0)=""/66, 0x42, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:38:38 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1cf501, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x3b3583, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00') ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000080)={0x30000, 0x80000000, 0x1, 'queue0\x00', 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) read$rfkill(r3, &(0x7f00000001c0), 0x8) 20:38:38 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x24}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:38 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x2, 0x8, 0x0, 0xffffffffffffffff}) 20:38:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "d0e8694d174b568560c2449439164279b03b40109b8718a2737ac3c90627af05b5ac4a6eaab2e7f3b313c361bebb712ee261098544eea30e0ead27c8c73a2c8dee598f17657b515f64b8f7c2fe6f00976ed40d185e8279a094da2a53be0617a616d541f9c217423be428c382985aea362d111a248688576c1b399fbd035efd23e899468730df6b0baa3a3939578da6621550973d99bf4375440482b8a339333c771bab1bc5e79645c09693f749c71021e5e4939cdd959058bc84e41cf10fd32de6d2a1f117aeeb4510436e419e5c2dd4c80a72817c23d495495c22edabc0e834ed9ffed6da2ab60aeb1c4915624ea1ab6700eb88d40cfd1435ba52381750b94420d97e6ca3c4f3dc0b6026cca11f8aad9f46ded27baa9b7ea324bbf411743d9a66dd312526b8f847473869ae3ef2121f9ad22c30d6db4f2a9a7b4f1447dfbde53640ff475ce3ec80f27441a4cd69f3eead14654177d5b23f37217f82885b6d3d3f92963bd79bc8b1df9327d97c5a63676943638a4042e07518bc45de842fe6e83f8d4a3aefcbcb0638bf7fc9a466e0b7adc7fec0438e1b8f466659f14d60fd6493b47b95f1b1cede4c51fe14df7ccf5fa842e34b156a3651c545b63975be6d8f6ad32432c59bbc12bfe8d92de49d569f3170d2433bd367a48243da8e715ead167ffbbb51978977d88b8cf22d6874734c7c50b85c7f5e94b0a65a61daa9b6994f4f832c8a53e92f491edb60a3aa9a0d4cf6a3cab48cfbf8d24f16279fb8471e283bc5d5f6925474848ba574180549f171c6d5e5a38ea307eb1a61472290d296b351ea34742d185a5cfe4a0be30b3e7bedbe60158c1134503beb111f01a5bfc4c3d616627d8dce5a12017bb5b999cad41d7880a332c3ef3d3b2ba25c2d012c5f1814b4b20e3d27359488db1d039af55dc94948128f2893d9d9b45f884604d0f3ce113cdf633b95ee7f473e2958604ef76b38a0ccda186b5163b976a4bc1bf722e635e93ba56258a61b7988c74f9460f49aa085f8abbb1c07d84b5ea5dd8ce2c13f3878f80223a6de12dfbb7c321b17c1c26717385411dbfebbdc0d4495679bb0ea67286c7d4416a354473951aba2b9d77e33e31f0a20e342ebce02f851b27dc7f41f9894e16377410915bd58c5fce61be733ae46511967e9bde1ad921fd9ee7dde10c4abc0ce44aef2086376aa70317efeb43c7308802a2d901650822233c5839cc73cccb85004115c9b11dec120306d640ab5e8dd27284dfe36bd70c72ed6653afba9a6caeabc37857495509b1f144bf9ea40e588ea8c51d00fd7f064e357db940948906e721414cb4ef50456b0f7bea0e2777e5739eed525a0c7c0b2b3ce8b37fecedba475e01c31f6e05021177e5f8b2a98747ce743cdbed7bf674c7e7b483327ebbfe87687233f97cb284a436c9a6e0637383b913e36257838adca92187b5476e3ad2a06dfba4a0ddb22241137fb592c4a7381e87b67689afd73c7690f4841525816e5a5dcf601d4a830dcef091cf964f2dcd0b4cb1cc34cf04cc924a9fd9be3ee00dedb913f7449d3dbfa944d3afa2fc9202b1e62f5544c693e1f600980ce82e0c7c6f2af744c6b76f42cbd41127a3f92f159b449d76172c2b196083f59a92ae0ab7a329cacd8a3aad576101f482b10e14d346df1a751e6bbb7e06eb6c79ce41eb512a145e84f1a1bbbfca35e459af41fd5a2a3c24fffdd6ef7aa1674ba95b745f40b259301d7a15681597d88ec03b7a1019f94b21c48d3530e524d77967340dca7b1a31dd7569af5c30141dc44917c3a7be77b4f61d89f20122c1a373aababe69b74d07fbd7d63a2900e188a84b3f443bdc595584273c1b1983d1b341e304368f0d6da8e96e1f1614d08275ea9e9c64b03d202adb441607a85bdbfb04855715cf4ff7693ddfb7ec92268e0e56b64b31c4311b9d94c1c828e6943964437a2229b46"}, 0x5bb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4006010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x6, 0x1, 0x0, 0x5b26cb75, 0x2, 0x1}, 0x9) 20:38:38 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x14}]}, 0x14, 0x0) [ 1437.805622] loop6: detected capacity change from 0 to 4096 [ 1437.814775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.836565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.837507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:38:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0xf0ffffff7f0000) 20:38:38 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x10000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc4}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:38:38 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x600}]}, 0x14, 0x0) 20:38:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10362}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x572, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000140)="1b12e4acfae801d6bf2198a74ecfaa58", 0x10}, {&(0x7f00000001c0)="e4433bbe8dfce4c8c9f9c2045773496c6836c6172a3055a54f67b2760a593a896fb101593d8d4c2c7bf2b9568946680fcbad203fb728879bddca05ea1929a99311da211c56f061e1b4dfacadc63cfbd5859e977027a9743a6a1f94148ab325ee3de4c760a773b9f1c008d1ef78d47c216b661eff7c333c866269bac1a4ecafaf795c", 0x82}, {&(0x7f0000000400)="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", 0x3b7}], 0x4, 0xb9e6, 0x0, 0x4) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000), &(0x7f0000000040)={'L+', 0x5}, 0x16, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000280)="cb06e6ded27b4039e79792e671a7899f38229e3edd9a3e3ddcc60bc9a1b651ac9995b7753ea8eb99163978a393c2da098d5462c6edd1fe53dddf8bc42f36d05d0f0896164b79f57f3dc0ffe29f514cee6360fcb9de8560bb92cc96ec8d65789fd940c766a822e7a2f53e", 0x6a, 0xfffffffffffffffc, 0x0, 0x3, r1}]) r3 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r4, 0x3, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000000c0)="8d6dae0e940388a2", 0x8}, 0x0, 0x0]) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000980)={r2, 0x4, 0x3, 0x6d57}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r6, r5, 0x0, 0x6a) pidfd_send_signal(r5, 0x2e, &(0x7f0000000300)={0x1a, 0x8, 0x3f}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r8, r7, 0x0, 0x6a) 20:38:38 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x10000, 0x7, 0x3}) recvmmsg$unix(r0, &(0x7f00000005c0)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/39, 0x27}], 0x1, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x1, 0x12061, &(0x7f0000000600)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1210000, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x4}}, {@timeout={'timeout', 0x3d, 0x9}}, {@common=@cache_fscache}, {@timeout={'timeout', 0x3d, 0x800}}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x66, 0x64, 0x39, 0x63, 0x37, 0x6, 0x62], 0x2d, [0x37, 0x31, 0x36, 0x63], 0x2d, [0x34, 0x62, 0x61, 0x30], 0x2d, [0x39, 0x65, 0x31], 0x2d, [0x34, 0x36, 0x34, 0x62, 0x38, 0x62, 0x64, 0x66]}}}, {@smackfsdef={'smackfsdef', 0x3d, 'wlan0\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'wlan0\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, ',}@'}}, {@obj_role={'obj_role', 0x3d, 'wlan0\x00'}}]}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) accept4(r4, &(0x7f0000000800)=@rc, &(0x7f0000000880)=0x80, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000780)={&(0x7f00000006c0)=""/187, 0xbb, 0x2, 0x6}) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000680)=0x5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'vlan0\x00'}) [ 1437.927086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:38:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000002c0)=0x10001, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) read$rfkill(r1, &(0x7f0000000000), 0x8) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="81c6f41db809a282beb1beb1e2ffb5793e8f9acdac378ea57d4ca47205f1dd9a1a1787825ae53355b7", 0x29}, {&(0x7f0000000100)="98b844226503864b64f40d193d40c151b4777f526fcc6a1896d778dc3edfce760fb759c7402b05687aa2bf8ab1f5de1e437759", 0x33}, {&(0x7f0000000140)="b5a5a9cf85a7272f9f89035cda9f67866e02c4c9e113a06c9488534b9262d8c8c8c5d32df4745a3a23", 0x29}, {&(0x7f0000000180)="f3cdf46883f9cf120ad72e721aac2ab60a1647347519676954d4ba0877d3eb825ba14c919a44487c608dfa8be61b9503445739e96a7b90a566d29bf0ec085c652dc6aef780b1242a587497bfa86da9d0668cafc6f561471f834d1ce1e44a3c7c57", 0x61}, {&(0x7f0000000200)="0d892a54315c1bc4ffa2ab988900d62dd6118912ccf3c19f0387dd53d064107965a33024a1d0892a7578e8e1895f2d7fe0632d39480b6e3d48eb64d2d9b9a5fbc54cfaee8af6cb7c1f297e4a1d81c8a8f23bbbe491c478ac7ea00d71efd0f53ad0c44950626ca1929f8fe090c1a4b65322ba5b92dffa2d3b7cb99e1bac530dc7f09db6c8085626b82a56ce7ad7dff09aa1c5c76a377a2c", 0x97}], 0x5) [ 1438.070394] loop6: detected capacity change from 0 to 4096 20:38:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8080, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) [ 1438.111330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1438.119162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:39 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10362}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x572, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000140)="1b12e4acfae801d6bf2198a74ecfaa58", 0x10}, {&(0x7f00000001c0)="e4433bbe8dfce4c8c9f9c2045773496c6836c6172a3055a54f67b2760a593a896fb101593d8d4c2c7bf2b9568946680fcbad203fb728879bddca05ea1929a99311da211c56f061e1b4dfacadc63cfbd5859e977027a9743a6a1f94148ab325ee3de4c760a773b9f1c008d1ef78d47c216b661eff7c333c866269bac1a4ecafaf795c", 0x82}, {&(0x7f0000000400)="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", 0x3b7}], 0x4, 0xb9e6, 0x0, 0x4) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000), &(0x7f0000000040)={'L+', 0x5}, 0x16, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000280)="cb06e6ded27b4039e79792e671a7899f38229e3edd9a3e3ddcc60bc9a1b651ac9995b7753ea8eb99163978a393c2da098d5462c6edd1fe53dddf8bc42f36d05d0f0896164b79f57f3dc0ffe29f514cee6360fcb9de8560bb92cc96ec8d65789fd940c766a822e7a2f53e", 0x6a, 0xfffffffffffffffc, 0x0, 0x3, r1}]) r3 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r4, 0x3, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000000c0)="8d6dae0e940388a2", 0x8}, 0x0, 0x0]) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000980)={r2, 0x4, 0x3, 0x6d57}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r6, r5, 0x0, 0x6a) pidfd_send_signal(r5, 0x2e, &(0x7f0000000300)={0x1a, 0x8, 0x3f}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r8, r7, 0x0, 0x6a) [ 1438.147833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.252132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:38:48 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000) truncate(&(0x7f0000000100)='./file0\x00', 0xe) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') 20:38:48 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x25}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x4bc000) 20:38:48 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x1400}]}, 0x14, 0x0) 20:38:48 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f00000002c0)='.\x00', 0x101, 0x7, &(0x7f0000000a00)=[{&(0x7f00000004c0)="f024296c9e4575a939c87199db6f63d95ff704b2a00bd359e52b5ef140b9845395d8e3cfe51abebe9e734df36c42cb0f920b1854104668d6abcf6c7066c1bf828cdca657692fb719f63b2a40aff5bf35e7159e893d3542", 0x57, 0x2}, {&(0x7f0000000540)="0352ef9448b3c99f99b425351cfbb6ab2bad5a8a84a65c0ff8752e84302e18dec8dfbcf65bc58e5e0a4d81a0ba345afcaa5be44f5094bdb15e122f234c2634567080ed547fe5b2cec50e3aedb5895a114c8e94f8047eb430fbfd67ccecef394df7bb82f75dbc5ea1543ca73738550607b53bfbcf793c201cfc0d08b9e0ad60be837f1be6536744b2b7ba7267bd94ee47306047088ba19cf7a72187e8eff33329c75a51cdbd74867603642e5c0e91d7babd04c8e261479a761e41781ef46418cc40b4415f134593ab8a", 0xc9, 0x790}, {&(0x7f0000000640)="a2304df20773582a229d9c028e0cb22e6726877fe1746edf9b50964dd7ba9ff5f31c08d50c0ac256c87d2640c94fd4f70d8161f7d2c6c5174a54540dc5a81fcdacdf29169379a35fad209aee1c763163e3850d93ee532cfcaf8a31bc9ea8c3eb1cb97277f6ba7f8114f38b8a7397b9fd0458bfdae13e1db10ddefedbd05b23c6955797ffa713f4131d0bb18387adafa72c2788f7", 0x94, 0x10001}, {&(0x7f0000000700)="88768b4f78d6283d714bad2009453654fef5e5fb1aeb3a403ec08cd7fca02a9ef4c256af8a0b9270f6644a5b25801f4e135a02b92dd68af54be98ef024b358ab8017c51f3d23b4d4ae78c270fe301ea913d7276657f113154f0628d47a04dfc5abee1ce42230f2795a88a308fb8eafbbc440e6", 0x73, 0x7}, {&(0x7f0000000780)="50704f36819866a1b3c2c336204684db9af3f62a69a4c7dec96192627d7f46d334efa3ed8a1a2946d9a9ad8c3550b7f223088b0ed9615b81039d91f9e7d432ecf0531a6266feaf8249b7f3cc766a9a22986c154cf13e2b846a4286e92990edf5aac2c3e94bc05bac5887428e017e392632e28aa7012ebff06b7a5ff731b3cd48110fd4b6dc31e137334d8836806c8fa2782134e642c7307ed251ded6e075bf1106e17a06ef92394e4679b8cc4a4c6f610cb20c5210aa8c48423b6159d1a1abe41ad3b537cd", 0xc5, 0x2}, {&(0x7f0000000880)="d2875c17d67d2972ab142d7775827dde78f07be6b0177605e65aa4e350638773ed211d08e6d63539885ee092418328d5e8adebc14638f742be1002cdcc88df3f502c5932b544a378fedbea345e2849393a8574e1ea2bcab0e76e6daa3f10", 0x5e, 0x8}, {&(0x7f0000000900)="9808702e3f5b895a1e3d59163ba9ccdeee295f79143fef2434eb84015b2d5d0e8ef01cf073b1ddea6f3f73adead97abee8036323abde2078874b5bf6345243bd28e903b39b9453badae83960c84350708636986daa4d8d9c4aa3758aaa562df531a9c2d25362441ab85b1c25d3998b510253f085eb8b1b9b8cc355cd9bf54126f96d057a864c37539f3892ad8969206febb1e7226cce52dd99d36001e496be02258539bf7a5d8a38870964bfefcf5033def711e6348bb9c7ed58a61ce93c2906ba5dad5ae55089", 0xc7, 0x9}], 0x188000, &(0x7f0000000ac0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@huge_advise}, {@huge_always}, {@huge_never}, {@huge_never}, {@huge_never}, {@huge_never}], [{@euid_eq={'euid', 0x3d, r1}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz1\x00'}}, {@uid_gt}, {@obj_role={'obj_role', 0x3d, './cgroup.cpu/syz1\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, './cgroup/syz0\x00'}}, {@obj_role={'obj_role', 0x3d, './cgroup.net/syz0\x00'}}, {@euid_gt={'euid>', 0xee01}}, {@audit}]}) 20:38:48 executing program 3: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x824, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 20:38:48 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x1f00}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:48 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000340)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2f, "a3fe7e85a36283"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001340)={r3, 0xfffffffffffffff7}) vmsplice(r1, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1447.660607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.681355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.693637] loop6: detected capacity change from 0 to 4096 20:38:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xff}, 0x40218, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"aeca20a345d83298b6577c92719e9b8b", r2, 0x0, {0x9, 0x4}, {0x6, 0xfb8}, 0x1, [0x8, 0x81, 0x0, 0x14d, 0xe40, 0x0, 0x1, 0x1000, 0x100000000, 0x5, 0x80000001, 0x7fff, 0x1, 0xff, 0x81, 0x4]}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r3 = getpid() r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f00000017c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) bind$packet(r1, &(0x7f0000000380)={0x11, 0x6, r6, 0x1, 0x1, 0x6, @local}, 0x14) pidfd_open(r3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r7, &(0x7f0000000100)=""/147, 0x93, 0x0) close(r0) 20:38:48 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$CDROM_LOCKDOOR(r1, 0x5329, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x4}, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x11, 0xc0, 0x6, 0x19, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10, 0x180, 0x1, 0xffffff7f}}) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="f6e3256508b97b3fb626c402a231c32734f4c161470232244bf7e48354e675490a4f57ff8a9e1b3ad4c1ef53cc243593b5c0e8a634268fc3472457f484ecf611c5b18b4af0e66778", 0x48, 0x10, &(0x7f0000000340)={0x11, 0x10, r5, 0x1, 0x1}, 0x14) r6 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x608082) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000100)) r7 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f0000000000)=[{r2, 0x2}, {r1, 0xd010}, {r3, 0x8010}, {r4, 0x22}, {r0, 0x1006}, {r7, 0x5531}], 0x6, 0x200) vmsplice(r1, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:38:48 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/virtio-ports', 0x406000, 0x92) r3 = io_uring_setup(0x4603, &(0x7f0000000100)={0x0, 0x906, 0x0, 0x0, 0x50}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r1, &(0x7f0000000040)={r2, r3}) r4 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001001800009c", @ANYRES32=r4, @ANYBLOB="030000000e0000002e2f66696c653000"]) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xa) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0000004}) [ 1447.841870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1447.892758] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.979410] audit: type=1400 audit(1756154329.043:31): avc: denied { block_suspend } for pid=15884 comm="syz-executor.2" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 1447.981156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.990453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x2000}]}, 0x14, 0x0) 20:38:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/virtio-ports', 0x406000, 0x92) r3 = io_uring_setup(0x4603, &(0x7f0000000100)={0x0, 0x906, 0x0, 0x0, 0x50}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r1, &(0x7f0000000040)={r2, r3}) r4 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001001800009c", @ANYRES32=r4, @ANYBLOB="030000000e0000002e2f66696c653000"]) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xa) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0000004}) 20:38:59 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x2000}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:59 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "ef148b5c7cd054d3d44385f40ad03d15"}, 0x11, 0x3) 20:38:59 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4, 0x40043) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x130, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffcae}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0x6, 0x1, 0xe0, 0x0, 0x3, 0x10, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x400, 0xffffffff, 0xfffffffb, 0x6, 0x5, 0x200, 0x3, 0x0, 0x3, 0x0, 0x80}, 0xffffffffffffffff, 0xa, r2, 0x1) 20:38:59 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x26}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:38:59 executing program 3: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pread64(r1, &(0x7f0000000000)=""/200, 0xc8, 0x100000000) r2 = gettid() clone3(&(0x7f0000005880)={0xfa300000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000140)={@loopback}, 0x14) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000100)={0x3, 0x7, 0x40, 0xffffffff, 0x7ff}) tgkill(r0, r2, 0xb) 20:38:59 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c, 0x80000) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000004c0)={{r2}, "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"}) r3 = getpgrp(0x0) r4 = gettid() tgkill(r3, r4, 0x2000b) r5 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x1, 0x0, 0x9, 0x0, 0x2, 0xd00c0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x3, 0x20000000000}, 0x40000, 0x100, 0x2, 0x3, 0x21, 0xefa, 0x6e, 0x0, 0x9, 0x0, 0x4}, r3, 0xffffffffffffffff, r0, 0xa) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) r7 = accept4(0xffffffffffffffff, &(0x7f00000014c0)=@sco, &(0x7f0000000200)=0x80, 0x800) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[r5, r6, r7, r2], 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1458.608483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:59 executing program 3: mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x20640, 0x8) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', 0x71, 0x2, &(0x7f0000000500)=[{&(0x7f0000000400)="c3", 0x1}, {&(0x7f0000000080)="b9d1894baa982434edf8310f327a14", 0xf}], 0x120000, &(0x7f0000000100)=ANY=[@ANYBLOB="02c92bf2"]) 20:38:59 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x0, 0x2, 0x6, 0x0, 0x6, 0x6000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x10294, 0x2, 0x993d, 0x9, 0x4, 0xfff, 0x401, 0x0, 0x4, 0x0, 0x7fffffff}, r1, 0x4, r0, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xff, 0x81, 0x6, 0x5, 0x0, 0x1ff, 0x20800, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x9, 0x4581245e}, 0x884, 0x4bf8000, 0x200, 0x8, 0x1, 0x1000008, 0x801, 0x0, 0x5, 0x0, 0x8}, r1, 0xa, r0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x900, 0x150) r2 = mq_open(&(0x7f0000000240)='},:@\x00', 0x40, 0x4, &(0x7f0000000280)={0x1e6, 0xfffffffffffffff7, 0x5, 0x9}) write(r2, &(0x7f00000002c0)="b46221778fbcb58efe697e14afd94b137fb63ec08b1c073389a1a44d7e2509b879c5", 0x22) [ 1458.670900] loop6: detected capacity change from 0 to 4096 [ 1458.680215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:59 executing program 3: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x7f, 0x1, 0x0, 0x7, 0x25a}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x2030000}], 0x0, &(0x7f0000014d00)) 20:38:59 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000380)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0x8001, 0x1}) sendfile(r0, r1, 0x0, 0x400) creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r0, r1, 0x0, 0x10400) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="347527e80dab8713eda4a1608f3575530ea3b50d662b7dbd341c075a0f31fe4211773e073ad685b0a6b40eb47848c9a31c513bf5278aa2d2be135104d75d00b32cad24f48812e6e57854790c13919934aa59273715862bd6d1cffeb7c173f9730429c5fb96500b820cd88cce1326c3f8f550cfc046d938ff9b5b9679db3c3fc5a1f9d7bfb7edf0ab96013b8907563a4018b265c9ca587bb19b894fd9065a1df384455d67b9aea4e897e459e6a12f2c7e", 0xb0, 0x200}, {&(0x7f0000000200)="644c0a5c469ac8c85cb8edd09413cbabe7efcff00def63b44739daec7a8aa700e34a89b7ae2bd65fc63eaa4dfeccc93f9b4f14ddc7c6e307b6e2359720609697ab13d2c2b0277275c96371ad7aebf41e320fd51cdc8ab45d4060b1c0d2da36c17d6d179af30268eddc16698522e876f5cc2a16c35dcc7d6f52a40af678e9a7e611e57d0e809295c25d", 0x89, 0x8}], 0x2000000, &(0x7f0000000300)={[{'/dev/full\x00'}, {'/dev/full\x00'}, {'/dev/full\x00'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/full\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x55, 0x31, 0x31, 0x61, 0x61, 0x32], 0x2d, [0x32, 0x62, 0x31, 0x65], 0x2d, [0x62, 0x64, 0x9, 0x64], 0x2d, [0x65, 0x33, 0x7, 0x38], 0x2d, [0x19fcfd5b9951d7af, 0x66, 0x35, 0x38, 0x62, 0x66, 0x34, 0x62]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) fadvise64(r3, 0x5, 0x7c70, 0x1) [ 1458.748849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:38:59 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x284) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0) r3 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x90840, 0x15) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x3}, {0x7ff}, 0xb8, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)="531967451d0d678faed56a578946869a28c33a954ebd67d9c60bf5f04a69473b864c362c0cb24fddf18bf66ad676120b077dd03e6b0ca73b018dfaaf5b4b603bba56ec35dbda95e1fa06c81dbea2e376a628dc", 0x53, 0x0, &(0x7f0000000340)={0x2, 0xe3, {0x1, 0xc, 0x3c, "360bc0eb5ceff27db4256acc0d97bd5d1d51047d16f24b3fc20aff846aa885c29dcea152a15d3617a34228f4a062750301e86c8d760c315a9522175a", 0x9a, "ed13dc724d234945f32ffce3b71c55251189b97402e7c5b1360711181a102b5f11a599224c6da053526378a0cc6f9c1e70fb7889c5a270b0743a9795d55dff6fc26b238f67b4531f0ac637afb309e1e39de255f3bb4c05554c35738f62b6a8d61818fc0e354b06d059127831ed9cc8db812ca317b125c678f3a1e523f384a3a592871ae90132914b487b872326f8e9cb5c06854ca5c0dc39db85"}, 0x4b, "798d974b9a5940c1daaca3dd46b5d382d8f618e76b296bd201305b88abbe16d52a14d14fc862e8fe6019a5d0761ccf076f1197dc1511e9bd09965c0dc6ce1b72da35607526fa6811aaeb4d"}, 0x13a}) sendfile(r2, r0, &(0x7f0000000000)=0x80, 0x8) vmsplice(r1, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x3, 0x1000, 0x0, &(0x7f0000000040), 0x18, 0x0, &(0x7f0000000100)="bd0c9e6372b1257f7256386fe583cccaa5b90a7dcb55a452"}) [ 1458.827498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.912631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.999802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:39:08 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x2100}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:39:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x9, 0x0, 0xfe, 0x0, 0x0, 0x40109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) [ 1467.889707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.890787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 20:39:08 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xd7, 0x1, 0x7, 0x1, 0x2, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x10, 0x1a}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x20, 0x5, 0x1f, 0x20, 0xa5}, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="050f6415ded15dea41e3fa0409ec12daf222050000"]}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x8, 0x20, 0x8, 0x5, 0x0, 0x9, 0x20, 0xac8fadfe7357d027, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x10000, 0x3}, 0x20000, 0xfffffffffffffffd, 0x4, 0x0, 0x9, 0x81, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3, 0xff, 0x7, 0x1, 0x0, 0x1, 0x80b, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa0, 0x1, @perf_bp, 0x1c8, 0x200, 0x2, 0x8, 0x5, 0x9, 0x3, 0x0, 0x1}, r1, 0xd, 0xffffffffffffffff, 0xa) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xd6, 0x1, 0x6, 0xf7, 0x0, 0x80000000, 0x830, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x3, 0x6, 0x0, 0xbbc6, 0x400, 0x0, 0xa000, 0x0, 0x5}, r1, 0xf, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='cmdline\x00', &(0x7f0000000340)='cmdline\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r4, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 20:39:08 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) io_uring_setup(0x21c6, &(0x7f0000000180)={0x0, 0x32fe, 0x0, 0x3, 0xa9}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = msgget(0x3, 0x446) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r4, 0x0) r5 = getpid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, r2, r4, 0xee01, 0xffffffffffffffff, 0x8, 0x9}, 0x0, 0x0, 0x3ff, 0x1, 0x5fe2, 0x54d, 0x2, 0x9, 0x2, 0x81, r5}) getgroups(0x2, &(0x7f0000000200)=[0x0, r4]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:39:08 executing program 3: msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/26) r0 = msgget$private(0x0, 0x405) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f00000001c0)=0xe8) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = getegid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x0, r1, 0xee00, r2, r3, 0x10, 0xc7de}, 0x0, 0x0, 0x3ff, 0x101, 0x0, 0x2, 0x8000, 0x8, 0x9, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}) 20:39:08 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x3f00}]}, 0x14, 0x0) 20:39:08 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x60}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:39:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa52526141", 0x24, 0x1e0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01d78b520b21aef51b185633e8b329b03d586a9b701647e30560eecc3373d2b470db65552e9e76cf7b37868dbaf6ff984fe088918bf58d5095ae31149756440205bb14b6ddeddbf05ad8d2267a0a99c7177d2bc15fb9df71efb9b3e9bf2443a505d123267b1db8f431acd14b45a2c891ff05c02a556388bbf0efca260205f5a1148fbf02e5c0c4c59bd48c58eb4777a0831a93e5efa46d80d661264bbff90bd0b73cc208f6e7c7427ad28c54f305ce131e84213a902b3f1711c1372903f311ee9dd1f99573394a446c15644f16381e79dda3e40175dc6e2bb2d276c3dedc82e2cf2c3e94b6b7ea4eb4025ef8f240986451e469"]) 20:39:08 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40002, 0xa) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x2}, [{}, {}, {}]}, 0x1b, 0x0) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)=""/158, 0x9e) [ 1467.951373] loop6: detected capacity change from 0 to 4096 [ 1467.969084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1467.981117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1467.986579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:39:09 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') [ 1468.069569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:39:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x20, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x80) 20:39:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0xff0f}]}, 0x14, 0x0) 20:39:09 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000380)="200005004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x22080}], 0x0, &(0x7f0000014900)) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0xffffffffffff0000, 0x100000001}) mount_setattr(r1, &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000000c0)={0x7a, 0x7c, 0x0, {r2}}, 0x20) [ 1468.104555] loop6: detected capacity change from 0 to 4096 [ 1468.126051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:39:09 executing program 2: io_setup(0x6a02, &(0x7f0000000000)=0x0) io_submit(r0, 0x3a, &(0x7f0000000000)) r1 = epoll_create(0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = syz_open_dev$hidraw(&(0x7f0000000180), 0x4ba4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r4, 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f0000001680)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffffffffffffffff, &(0x7f0000000080)="108cbba9683be6d64c89f78100614f4f014bf87d9414adcf4f83f8", 0x1b, 0x7, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000200)="2fae97abe1089ea5ffb8c80cbd323a961c931b619b6be0e369fe845c8ce37274a2932068bd71fad8660537da85cdda63e74afdfa9e782f17921bb15226409119498a5973f1fca136a665c83ed74bfa1937f6e879ca4daeac57436e6225cfe19a62abf85f051abdcdc6a7cd39e9eacd0898dc216a074df58dd07f7afec882121495a6a922a53105066ce57eea14cbf0a922ee68ca3d42b96025ef3268aa93c74d7923851d0bce635a6c6a9f8fd4ec63b047c46f75cb762b777ec6a8b73ac4e04dc5d061facddbc0ebd111e424851cd79abc708bb05160503c2a8844e80d3db29aa927d7aaff3a5374d0468a024ceead3dba20dc0c255568900d3f48851e", 0xfd, 0x2, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xfff7, 0xffffffffffffffff, &(0x7f0000000300)="c948fa2b8d506b553f06c40a8b443b7ebd51b92f14e53dcf2ea13ecd8140fef8832eca96eed8ab6d8f1cba99cd37f0aafbacf47d82da537803b396da0a17a5c8b3d2a00708d1aab43b173752ea664298f2f4c7800864169ab5117ea53aaf1e7aeda3c42ac9b26eb1162997814ae1e21bc08fdc77a7829c0636e2e8ce782af8301b1e2cc522bc9c42438b542d560b5c90c758e3f1035d8816a5fe0d7a1a205032cba1513e", 0xa4, 0xfffffffffffffffb, 0x0, 0x1}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f0000000400)="228ec55404e567038a289cf5bf532ccba88cd8604dfc9c7b205cbf5115b29ce6285d748cd59f7910e6c352dc724f8074e7a41f0140b08f518f7d7318ccf2595e137d96017897bcd2ddb181e9fde6fce34fc09870477e1db197bf46e8566f941e8743187124593fcdf0b8b6b9de2f149f6d6fd99f1e77be741629243fb5137bab65ca1df988312a516b7a7278c1a2e3efae14945389adbdcdcbd0cc13e35643133cc725082538b8f047aa5997dbd691df79857f0130967ad06e669240ed0d60856894a148a612fb1cb329cab143b1fa9b39aa80ac4c0208ea9fcb3193236452b349b02e7aba5782fa4ad0e7d7b2af8a05450416df2189f0a4ebe4153a9ea53ff710d6e2817f14e4603f8108b975278c314d910490cb2f5ce5ca32dfd7ba9fa1f29b0986a53c0ee76e8d0480446eec4c5957b40ec5ec26dba3992aac601a25e9299bbf4f1f3c94255f971a7fc0077930137fef8abb57e028ca1126379f8b5cf065d1c531de83385fca1cffbee7f9b0c28277028cfc41cd041c4980a10eb752b6696f6d6491b1dbf28e18df721e6b4363e700a4d0e203147565cf29cb2ba7d68820beddb5d3200bedbbc54eff96aad22fee80cce4dfa1f370a89a42564e145eb1e5577d3816dc3aae209821393348f6df0a3aa4abd89b90783db4a61d91314b151035eebbff5287b227648d6ef6beed16c0655fdac6fc043964160a5fc34f5932270c7ce7ffae9ab4e8d4060341ffc161db39546236afd52041f107daebaa78841447f38f110be54fad1896d43115d843a9fe7092d821c9733a6b4fea40255143e9a5fa93de556b218e502936895298123aed126f00aa2f6906d87ca2439bf10352a144448ea1bee4b2f2ae1bf7f3b82898f2a9257fdb20b47f26db51d4999597ebe0eb8f629cbadeeadf9c5d135d38c69d0d8f6ea542402d810b8cf83e11c4a2766496a64979c0e653175012c912a4bad7e1574dfd513ebd857b0c3655053ef1b631983d0939e0c1606150fc347d28fd1e55311c578d9aaec44abd61ef46c4a145d4579d3409c5e2e4b7271edf34153ac424ca4145ac10547df730a1514c010053888a67ffffb4f4800e70a13b9ae139abac8b7d1796286b224f6747f04f6046ca6fda9d0849aaf2d46abbb81d9ca413bdbec8a0db1313d0ef78492af896678b8c592ceb4d2fa3c4bd0a52269defb05789eebcdab568460f0d726664d42e918f2311d094ef158e90a987e035176a282351e3a5d40fbefea4aee5d285d69794aac3a2794f618dc38e4183a720bfc0e6efee9feeb17b88775e77158bfd78394761625d5dafaa39679fc59b8b4d00b741d72166ef52fd29a28bf8794ef09e2602098b9c1336d136b108d9843af42f05c8c068b9be957fd63dfd0ae1025fb38633916d8bb9c2cd327f28c7a3bcdccc32aaaba2eaa539a1497e2bb20d8353c6b5bc36f9a1da9d625099cb19cbf6c74b247bf0801f6c6a09f36f5d8fc365beb6994bc69028e5a2595244490344899a8fe72f6a806e1bb33899c2e8a67b884dea68b2b449ab7ac7f262c63a347de63fe8e5ac28f0ec33f3e7526908dac76a1676f722d76305d6bc884f1d2fe41475a86496906cc977730643c536d082b061ccdf90ef3d6a4473b7dff40eabbc45ba049baeda3da8343551712b00fdf9916ee7451004d095e933cc07e6aa06afa04b154f104b824f74cd5d59daa36d78413ecfe8f1ba937965aa7df3bc0d547da79546e3574e9bfb35c29212f1ea302eb4d50e8ec59cb3a05348203139b527dca73f16bdec4dd19ffdf95f040e600134549cfbed91d421103890eeb36130d14203204c656a6f941851efd8efa00e1e4725024bcd8a153122195d76a3e9b4d0bee0bf9a3cdf976a1cc1453c2ff3010893c1a578e15488753ed70c50bcfd7ba6a0ce9a6781ffa376d913edbf7303b74332651f388be9e600b17b5333f29c46e9174a69a5b15730cd84ee83ed52b1ba3f7f4b5b66f8c4dc5bdca4147b4feeb70a3a3d697f6984a3acfb32e44fcbf3c4fd23066fb29a02396797d51f828115f0be074cb80cd6f6678ebf52c3e8354df6b87815052043e0a06f931f08bc72e86a4cf55876563911150b771f39ba3cf260bc39502d6bdd7701123d7585241fd57f2cb4d5d594cf74b48b538e05c3a9a9982c3d68a4b74f044daf2ffcaca4996bad259dbfa19cb32f69f588ff8b8e1755ed294a91f3bf726774fb312b88c00ea0a8e7a281193251954a7debe0afdc4de0e6bfb1c13f7320707005f5d684136faf1cc8ac509d72aa8bff2a5fe311ad9a3b282eb42421601d3e369c18b3b050100dcfd00f282d6a5c07da671f1ee55d2762f9d5ad7c081f3ffc1ec1f66990dc4096fabe8408e5eb4d282e5dcaf7574d1512d75e86c38b54e71b39ec5876f9d6b2912df97b0a465798472b2a53cbc907d4ea1dca8572632e03f8cdcb94950e4b38527cdacceebe69b6d44c69e606264c81a8b8ecfc572556e6284e7f4fead619ae4a9d1d01f355c819b7b5aa4673c6f65020d379bd23bc1aa5d3454a74865b0caa54af47cd887ef3c79b869d24fc5a057e3cd92666db8e8a8e6ec3e25a327d7f4a25aa6bd1e0d7d616c1037031f4be9ab2f9d0d79c788fa7f7ed48ebd13301e0160208c366f0d7fc5f6e411003ef358821cfb0501d484c8b047fad0f63efd2c40fcb0d6b31d47086cb8dd24eee078b9ff11e2c16f61274faf47139fc817d948846dc32b7b66c1645fed7663a823ba5c0d0419e8e7f2a80c73fd69d6d35d648134a91b8772c202a0d538a9212ff46356dda69d55f5f9a43d2417e47dca5a7febba31bd43414ee18148534c652ba178360fcf292fb252855b62d922f280dfb82763a38b3f22a65d68edb89d54ab1333aa10c7348c12370a6efcb531e4d8066f6480b40dedbc5762f93100d62049c376f9159a00c285dd2a8c2d3670a1abd2db8cdeee988cf7fdd32c89ba37a3a0294ecb971abe1e4bbfe4bb54e18d340e5b718de70312585ad710c5f1cac789c79d6f7aa8aae2e452c0ba82701ad1e700daf94cef4cff44d0fbfe4ffbb6d74350fee7eea1afcf457fc2493e3ed3f89047a76c89a409a05cf971044c58f3fef24dd3059e1692d9be378f5df37b56fdd5c10074e156fed0a4ade1d9d2b533f01fc514684e34e73bf6d9b4d81484b8a27aac6b097467aa93ae4888c049fd91be667fa8b04251d9cf181b11d0e5711a3f5bcbb4bf4c3f6f7b116040b13a3df5beff92064489788129639b6b6babeaa14762ec0ab0aec323a6dc3cc69c83e37f67e7218496dca32290b644d28a4338cded8f699aa82a7e3d67bd8171b3b5e9620d1f120e3793a76a6d68427a43418f1e922ca25d8ae9b030fc8e3d810c6656c04c31ab4acae69ff43abe3a8698cb13362f6ed23d5e3a2fe39f6fcceaafe70c3884a426d68b5120bcef55b299e49726d7e50cf688c6ec90fc468c538d4faaaa5f1afbbf838117a931171a24727b73cb3d82ac158de1170e371f102d450f23fa5f780e04c45906fe4203d27932aa9a1aa004f64ec230b94ae5cdef0410cd34cd61ed815b252508864a6bf30f6fd86f911121867e58e144b014f54a7edc7630d2f77de78f8610bc4049585314184d3537a7cc925d0697893294189c259e1c30d493d277674f618e556079acc5d0f3b09bd7fd32419160511e6075e2053653c2a675231920d1c0a7f9976d2a1006cd269f1c648deeda35ab473299901eafe330fa2c634d4fd5f7aba0f4bd0ec547e0092b98b514380aaf4baa9dd1e7059d7fd9dbe9566932492663c430b6153ce776cd2d7cda207702635a3fc939e74395c66e515e7b953645546df74f1a823c4838949c278319572101781acb8961e135386d4e92c74a49850899b1f12b71e0d7d78f4ecc4678e90e014843fd96e4de6772a650f1f365e536b0d2691a2b3da15d5f0c18c5f22538b7aec90226a7557403bc216390137f5973e707d789d33cd9dcdff187c0dd4ee7f47767bb10fe0644edeaf26927b791a6b554cc706e9ae2510db290f9870e8ed260b3c938e90ec235861ae1525a4e6cdaf1d3c22add8880f3d61bd4ece5c0fecdd02e001764a8cd6ad1410b1c5e1bf6943363be2c609634fb7a4bcdd2419f4f47f084cadf57c0f9c551cbd388837fe698dee7527e3b4426c99fd0a897b978b003da6394a13bee4786f0ad503f2a9bfc3ebe960ab49d218c5186d7557cf38b1de2c12f14aee3dd580348ae9f64d8593e541207a16c5579c3e889f05b936e019977a7bf288d4150e86c90ced3b7c3606d5f646f21f53343498eb30ea98e360ee9eebc1341deaf968ecae108095b23c1a1b8c9df480a1940dbc7ff87776ee64c290d3a8af53ef6aa0081d8f0ca50ffded20340fb75b9cef36738ff8805a27e2df653d77e9fa23e4d9f031e327ff2d71859a407794a1394dc0e320df5bc0273d0bcb5cc3683e72028076d7a16eecc5acd5084ee9c7e597fb7ccd5a80678a2d8e0690d2bcc9642450ccbc307ab2051a4b8f69ea98eea2b58f486cac91257bb75c5c178092005b2e41d495d1d62872dcad29991c4825d3c0e55fe4e54273c7c93b87ac66459ed3d5e3d403c34b7d171e030caf3da6cd0096bf2929ff351ca2819ec9148f35da24f4e4c8f516853dc44f9d733d2ae1b836933669ddfd36dfc5091f3e77fb2ce9efb3f1a86ef45215ff809cb353f431a1a90e931d2c6f3859420ee4d18d2ca31ea03837b2201006cc60a263085be05c43ce65a788ae869684f869778b7e004894f6340a3c1debb95d8f795d4032d04a9d7a9dd7bfefc522a4b35f50c411152d07b60cafa5001ee3f595c15f32a30acc41e1dca6cf1d43d6b9ebf99a9a544fc56579f4775fcaac0aa6fa06a6a872e51f83d04dd275dc97598a4b760239b575272b7c32a2b2a1ce5aa64a1f9d2a0c35bdb5ad34b75112f78e24f6cfeb9a079bfd4a9c1e4dbb0df9f6f339a889a5cbe3a12865dd38328ba88029a23113f78bb88a54c27ca55c7f45bc6da5d97f085602045dbed8365062f3210fb95bda9db1e4632bcbf477afd9e7d339d16ec8e32a605bd733c1cbb6c1dc69aae438327ae065e57b90e7e31451b7582ea6c8a1c912aea6b9e4f8d5763bc016bf0340bbfb82d6d3e518e4742d51ba73d1012f704c81c4f368e72a69a3284dd55141f068fc2cf40567887306c36eff46b856ef7a6b51ae09ada94b196c24f99559e3f984ef064bba20304b7cafedad507cc8e8e7bace64072001682aebeec32c65cddde50ce5e9cf1aa6b427c2a7c0bf59b7bcfc9d792c09c964caf385d280291bce882a6986cf9efb28b0b42d28b4667beaa2a4f4e8f163e2e1979a1b168d618121c7af1a7887ac054cb5aaf562065b8544edc07de223a62c0952c51108106a382402369789e902608b00adcb22381b93eb668574baf90a37ecb0545c941b5b9a030df675496fff2fac1695cf7a0c5981c9e844e2b88633e5114f110d1387d4fab04591b5594888caadc8c0ca8dc1fdda0fa0b3f925638f09784e4d512a879938da206ee747adaee21bd9d3d7977b63d5d2dda4bbf05d95ae761b913333a65888c63bc10797f4cdaae6e1fe3a7d2ac6f6fb4701dfcf638f8886d7d32a35833249e5407365bb17f8fe550ca548d6a821bcde2b1d18dd308749b77e741688ca6473b908810db2a634c0d5146ff4a3b575bedc2dbace74531180d7cf7fd271ff6d5174853df844ad56dcd659f765c721335c87c86f21ff970b7d531f2b878cbc90a6fb472776f20a4e235fab0566df63b7b557c22c42cd469fb0954251c0c3b05d1262d7008d10b7", 0x1000, 0xc65, 0x0, 0x1}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000001440)="b736e93e65dd898f5afdf0fe2639fdc06ba7a2039848a385e2a4e78f94b30125480d04588420d6d925965a2fe3ea8bd4ff516804d4b53eaeb2a3bb5839fb93eac937b74284b6a348a86cfa0525e4a8543379558cf52aaf7fe028beafce96acfa62ac46274a0ce2980fbdbe41e216ce82bb633374d2bcbc53dd0bef8093ed390f59b8601dc1192e7441cb547e6d80c17b363a5c400c5d4bce58440144e528f38601396cd4550bceb2b1327ae2d2474c164863f7e5a1a3fcd3b3ed5231d8e7087e853d822cb2126b42c76049707a74292c", 0xd0, 0x8, 0x0, 0x2, r3}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x58af, 0xffffffffffffffff, &(0x7f0000001580)="31397033600f8ec397026e600f617698e52b7f234b34ba81158b9ac7ae135dd9dca1e72d6c0d2d535d430b97092de5dd3302f8a957a50deb0673a5dffc73700af5f0cd5abc51f3fdce94c2707f92a7b94e85cf528db9516509c1122b3517036be792a3c2ad6a14e2b2e328d071c55fcc359fcba23d33e2f477f4caa0cfd2ee49b7fd330b1d92f9fbaf6bd52d304f", 0x8e, 0x4, 0x0, 0x2, r4}]) io_destroy(r0) io_setup(0x0, &(0x7f0000000040)=0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfdef) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x31, &(0x7f0000000000), 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000016c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="7a000000000000002e2f66696c65310074573b81f5fa84dbc1525f03edf891ea8982a4ab2618877c1581955a885fe5460cf02776dcbf2ac54f6295842795596449e97ebb3435d2861fcbc333c3b7c3db795e6a87ddf35637ae98f981f30377f5b9f63f33bdd8ee624933686723db43b0fb1d4bee65917179cd7ecb998ea289653472d6ac9777f2388216be0ff6bea1e052815d1ba23398821dc4e7ca68d34e97a043396637ac38d208fe80a8edb7f40cfa34a9"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) io_submit(r5, 0x0, 0x0) [ 1468.182574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:39:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x80000}]}, 0x14, 0x0) 20:39:09 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) r1 = memfd_secret(0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0xef, 0xc1, 0x1, 0x0, 0x3d, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000180)}, 0x62044, 0x1, 0x100, 0x8, 0x7fffffff, 0x4, 0x8001, 0x0, 0x9, 0x0, 0x4000000000000000}, 0xffffffffffffffff, 0x2, r1, 0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1468.235998] loop6: detected capacity change from 0 to 4096 [ 1468.251798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1468.284036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.305293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.322846] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.396315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.397324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 20:39:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x40010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 20:39:18 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x4003fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x40000000, 0x4, 0xffeffffe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:39:18 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x200000}]}, 0x14, 0x0) 20:39:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3c, 0x3, 0x2, 0x4, 0x0, 0x40cec658, 0x846, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x10000, 0x8001, 0x7, 0x6, 0x1, 0x80000000, 0x3, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:39:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x50}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:39:18 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0xf0}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:39:18 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x2200}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:39:18 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x408001) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"11748e2b034c93930fc5140246445fec", 0x0, 0x0, {0x3, 0x1}, {0x1, 0x7fffffff}, 0x5, [0xffff, 0x1, 0x4ec, 0x80000001, 0x9dd, 0x4, 0x63e, 0x6, 0x80000000, 0x9, 0x7, 0x7, 0x7ff, 0x3ff, 0x7ff, 0x7f]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000240)={{r0}, r1, 0x6, @unused=[0x8, 0xba2, 0x3, 0x4], @name="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"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 20:39:18 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x7c, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x7f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xb7}}, './file0\x00'}) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r5 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x101400, 0x40}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x3f, 0xde, 0xf3, 0x0, 0x1, 0x100, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x9040, 0x6, 0x3, 0x3, 0x7fffffff, 0xc25c, 0x3, 0x0, 0x3, 0x0, 0x82}, r4, 0x9552, r5, 0x1) 20:39:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) [ 1477.881851] loop6: detected capacity change from 0 to 4096 [ 1477.883395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.901350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.960414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:39:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f00000000c0)=@v2, 0x14, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000008d00)={{0x2, 0x200, 0x9, 0x8000, 0x8, 0x3}, 0x383, [0x6, 0x10000, 0xffa8, 0x4, 0x8001, 0xfffff360, 0x0, 0x10000, 0x3, 0x8001, 0xffffff00, 0x5ba, 0x2, 0x9, 0x0, 0x8, 0x4, 0x7, 0x7fff, 0x9, 0x7d, 0xfffffffd, 0xaf64, 0x2, 0x7ff, 0x3, 0xffffffff, 0x39, 0x7f, 0xfb, 0x20, 0x1, 0x3, 0x4, 0x9, 0x7, 0x3f, 0x200, 0x0, 0x9, 0x1000, 0x3, 0x8001, 0x1, 0x1, 0xde4a, 0x233, 0x1000, 0x2, 0x13, 0x3, 0xa865, 0x0, 0x1ff, 0x83, 0xf9, 0x200, 0x33497868, 0x5e31, 0x15, 0x3ff, 0x4, 0x0, 0x5, 0x0, 0xdd, 0x8000, 0xa4, 0x4, 0x2, 0x9baf, 0x401, 0x1, 0x3, 0x112, 0x8, 0x6, 0x80000000, 0x200, 0x1, 0x7fffffff, 0x1, 0x9, 0x9c, 0x5ca0, 0x5, 0x8, 0x9, 0x10000, 0x0, 0x0, 0x1f, 0x7fffffff, 0x81, 0x3, 0x8, 0x8000, 0x200, 0x1, 0x5b5a, 0xfffffffc, 0x7, 0x0, 0xfffffee9, 0xfff, 0x63e, 0x9, 0x6, 0x40, 0x1, 0x1, 0x3, 0x4, 0x80000000, 0xf, 0x9, 0x3, 0x401, 0x3, 0x2, 0x4, 0x9, 0xb4c, 0x39, 0x0, 0xfffffffa, 0x0, 0x8001, 0x9, 0x6, 0x9, 0x9, 0x80, 0x8, 0x7fffffff, 0x6, 0x7, 0xf94, 0xfbf, 0x2f1, 0x1, 0x5, 0x1f, 0x8, 0x1, 0x7, 0xa3, 0x35, 0x6, 0x0, 0x9, 0x401, 0x5, 0x0, 0x3, 0xffff2d6e, 0x7, 0x8000, 0x3c9, 0x0, 0x1, 0x7, 0x10000, 0x0, 0x8, 0x10001, 0x0, 0x8000, 0x400, 0x4, 0x5, 0x7fff00, 0x5, 0x80000000, 0xfffffff9, 0x20, 0x9, 0x1, 0x8001, 0x0, 0x5, 0x5, 0x6, 0xc8, 0x800, 0x7, 0x665ba7b0, 0x51, 0x80000001, 0xffffffe1, 0x7, 0x1f, 0x7, 0x9, 0xecf, 0x4, 0x7, 0x9c65, 0x4, 0xffffffc1, 0x6, 0xffffffff, 0x8, 0x7, 0x69, 0x0, 0x0, 0xb6f, 0x1, 0x5, 0xabd0, 0x5, 0x9, 0x80000001, 0x8, 0x80000001, 0x7, 0x3, 0x5, 0x4eee, 0x9, 0x2a, 0xc2, 0x0, 0x2, 0x1, 0x5, 0x3, 0x100, 0x45, 0x7f, 0x0, 0x0, 0x6, 0x2, 0x5, 0xfffffffb, 0x5, 0x5, 0x1, 0x5, 0x2, 0xfffffc22, 0x5, 0x39, 0x0, 0x9, 0x2, 0x3, 0x6836, 0xa8, 0x401, 0x80, 0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0xe964, 0x1d1, 0x5, 0x6, 0x7030, 0xdad, 0x5, 0x8, 0x10001, 0xfffffffc, 0x1, 0x10001, 0x2, 0x1, 0x8, 0x4232, 0x5, 0x100, 0x3, 0xd8, 0x9, 0xfffffff7, 0x7fffffff, 0x2, 0x4, 0x7, 0x6, 0x2, 0x6, 0xf, 0x55, 0x3, 0xfffff66b, 0xffff, 0x3, 0x400000, 0xbb, 0xfff, 0x80000001, 0x0, 0x2, 0x9, 0x6, 0xfffffff8, 0x0, 0x10000, 0x8, 0xbe8e, 0x4, 0x8, 0x5, 0xe3, 0x1, 0x3, 0xfffffe00, 0x200, 0x4, 0x1, 0x10001, 0x9, 0x7fffffff, 0x200, 0x9, 0x4, 0x80000001, 0x9, 0x7, 0xfffffffd, 0x7, 0x7, 0x9, 0x8, 0xffffffff, 0x9, 0xffff7eab, 0x3, 0xffff, 0x80000000, 0x6, 0x2de, 0xff, 0x3, 0x1, 0x6, 0x4, 0x8001, 0x7, 0x6af, 0x800, 0x7, 0x3, 0x0, 0x7, 0x8000, 0xe9a, 0x1, 0x1, 0x10001, 0x1, 0x3, 0x80000001, 0x9, 0x8, 0x4, 0x10000, 0x9c, 0x8, 0x297, 0x4, 0x80000000, 0x8ec, 0x2, 0xffffffff, 0x7ff, 0x973, 0x10000, 0xc1d8, 0x8, 0x0, 0x6, 0x1, 0xfa53, 0x0, 0xfff, 0x1ff80, 0x81, 0x5, 0x4, 0x400, 0x0, 0x80000001, 0x6, 0x69, 0x40, 0x3, 0x3, 0x7fffffff, 0x7, 0x42, 0x5, 0x586f, 0xfffffffd, 0x4, 0x9, 0x101, 0x1, 0x4, 0x400, 0x3, 0x6, 0x9d, 0x6, 0xfff, 0x8b, 0x200, 0x8001, 0x2, 0x10000, 0x1f, 0x8, 0x0, 0x400, 0x7f, 0x5, 0x78, 0x9, 0x3ff, 0x8, 0x3ff, 0x401, 0x1000, 0x0, 0xc8, 0x4c212b60, 0x5c7, 0x8, 0x7, 0x9, 0x5, 0x0, 0x80000001, 0x3, 0x1, 0x1, 0xfffffffc, 0x8, 0x200, 0x7f, 0x2, 0x4, 0x81, 0x7, 0x0, 0x80000001, 0x3, 0x3, 0x7, 0x5, 0x0, 0x80000001, 0x0, 0x40, 0x8, 0x60, 0x1, 0x80c2, 0xfc90, 0x6, 0x3, 0x1, 0xfffffff7, 0x8, 0x5, 0x9, 0xffff, 0xfffffff7, 0x9, 0xffff1670, 0xff, 0x0, 0x6, 0x4, 0x20, 0x6b6, 0x80000000, 0x3, 0x8, 0x2, 0x1, 0x5, 0x401, 0x200, 0xd37, 0x9, 0xed1, 0x3, 0xffffffff, 0x1f, 0x28, 0x7fffffff, 0x4, 0x7fffffff, 0x9, 0x9, 0x9, 0x80, 0x4, 0x1, 0x1, 0x22, 0x4, 0x6b, 0xff, 0x8, 0x3, 0xff3, 0x101, 0x1, 0x9, 0x8, 0x3a, 0xff, 0x10000, 0xffff6080, 0x5, 0x5, 0x3f, 0x3, 0x3, 0x80000001, 0xff, 0x7, 0x1, 0x9, 0x1, 0x401, 0xfffffff8, 0x8001, 0x7fff, 0xc3, 0x10001, 0x7fff, 0x2, 0xbc34, 0x800, 0x55b1, 0x7b, 0x5, 0x20, 0x6, 0x5, 0x7, 0x3, 0x401, 0x9, 0xf4, 0x3, 0x5, 0x16, 0x1, 0x4, 0x82d, 0x1f, 0x81, 0x2, 0x1ed, 0x0, 0x3790, 0x0, 0xfff, 0x8, 0xaa54, 0xfffffff9, 0x13, 0x6, 0x81, 0x7, 0xd, 0x7ef, 0x7, 0x7fff, 0x0, 0x7ff, 0x2, 0x9, 0x2ca, 0x7, 0x3, 0x2, 0x6, 0xc9d, 0x5, 0x0, 0x101, 0x762, 0x3, 0x5bc3, 0xcde, 0x101, 0x7, 0x8, 0x5, 0x0, 0x24000000, 0x9, 0x158, 0xfffffff8, 0x0, 0x9, 0x7ff, 0xc8, 0x7, 0x5, 0x8000, 0x5, 0x1ff, 0x89a, 0xff, 0x5, 0x3ded, 0x2727, 0x6, 0x0, 0x92c, 0x1641, 0x5, 0x4, 0x5, 0x1f, 0x80, 0x1, 0x9, 0x1, 0x401, 0x3bb1, 0x2bb1, 0x3, 0x0, 0x8, 0x80000000, 0x7, 0x3ff, 0x0, 0x9, 0x6, 0x5, 0x5, 0xfff, 0x4, 0x400, 0x1, 0x1, 0x7, 0xf274, 0x80000000, 0x1ff, 0x0, 0x4, 0x5, 0x3f, 0x2f, 0x6, 0x8d9, 0x1f, 0x5, 0x2, 0xc0000000, 0x3000, 0x96, 0x1, 0x5, 0x6, 0x3153, 0x9, 0x4, 0x7, 0x44d, 0x4, 0x7, 0x1, 0x101, 0x3, 0x4, 0x0, 0x5, 0x4a9a, 0x80, 0x20, 0x7, 0x9092, 0x800, 0x6, 0x7f, 0x2, 0x7fff, 0x0, 0x5, 0x7fff, 0x4, 0x6, 0x2, 0x401, 0x81, 0x5, 0x1, 0x1ff, 0x9, 0xf61, 0x7, 0xcb000000, 0x5799, 0x2, 0x2, 0x7fff, 0x8ac2, 0x2, 0x7ff, 0x40, 0x4, 0x1, 0x7a, 0x1, 0x1a, 0xfffffffa, 0x8000, 0x7, 0x10000, 0x2e, 0xfffffff7, 0x5, 0x3, 0x4, 0x5, 0x6, 0x2, 0x2b, 0x6, 0x1, 0xffff, 0x1, 0x3f, 0x0, 0x243, 0x3, 0xfff, 0x9, 0xfffffffa, 0x0, 0x5, 0x99, 0x1, 0x4, 0x400, 0x41, 0x8, 0x1ff, 0x1, 0x80000000, 0x7fffffff, 0x2, 0x1, 0x101, 0x5, 0xd760, 0x1, 0x10001, 0x6, 0x7, 0x1, 0x9, 0x400, 0x6, 0x6, 0x7d24, 0x7, 0x4, 0x5, 0x81, 0x10000, 0x8, 0x7ff, 0x8, 0x8, 0x0, 0x7, 0x9, 0x7, 0x640c, 0x9679, 0x2, 0x3, 0x6, 0x4, 0x506, 0x0, 0x0, 0x87, 0x0, 0x50, 0x5, 0x3, 0x2, 0x39f, 0x5, 0x5, 0x7fff, 0xe3f, 0x6, 0x0, 0x1, 0x3f, 0x400, 0x7, 0x100, 0x10001, 0x8, 0x4, 0x5, 0x800000, 0x1000, 0x7fff, 0x400, 0x8, 0xfffffffe, 0x3, 0x0, 0xd2a, 0x3f, 0x6, 0x1, 0x3, 0x4, 0x0, 0x1000, 0x5, 0x2, 0x40, 0x7, 0x6, 0x9, 0x6, 0x9, 0x1, 0x80000000, 0xdb, 0x1, 0xdb49, 0x8, 0xbbc, 0x4, 0x1, 0x9, 0x101, 0x4136, 0x1fe2, 0x5, 0x1f, 0x20, 0x3ff, 0x0, 0xe56, 0x10000, 0x53, 0xfffffffe, 0x2, 0x8, 0x8, 0x80, 0xe0, 0x3, 0x4, 0x0, 0x8, 0x1, 0xb7b1, 0x80000001, 0x3, 0x81, 0x80, 0x80000001, 0xff6, 0xec, 0xf875, 0xaf8d, 0x3, 0x6acc, 0xffffffff, 0xff, 0x5, 0x7, 0x7, 0x0, 0x800, 0xfffffffb, 0x2, 0x8000, 0x80000000, 0x0, 0x4, 0x80000000, 0x8, 0x5, 0x40, 0x8, 0x3, 0xed, 0x0, 0xffffff48, 0x1fffe000, 0x3, 0x1, 0xe1, 0x4, 0x1, 0x72, 0x3, 0x3, 0xffffff80, 0x7f, 0x4, 0x64, 0x6, 0x0, 0x3, 0x6, 0x7fff, 0x1, 0x80000000, 0x2, 0xc2, 0x6, 0x1, 0xfc, 0x7, 0x39, 0x7f, 0x100, 0x80, 0x4, 0x3, 0x5, 0xd9, 0x7, 0x3, 0x8, 0x3, 0xffff8001, 0x7, 0x1, 0xc666, 0xd1a1, 0x5, 0x7, 0x9, 0x7, 0x6, 0x1, 0x8, 0xffff, 0x3, 0x5, 0x4, 0x40, 0x8, 0xb9, 0x5, 0x2, 0x1, 0x1, 0x963, 0x5, 0x897, 0x0, 0x4, 0x0, 0xffff0c7d, 0x7, 0x2, 0x1, 0xba82, 0x0, 0x3321, 0x5f, 0x401, 0x3, 0x4, 0x0, 0xb94, 0x1, 0x3, 0xfffff001, 0xffff, 0x8e9e, 0x1, 0x3f, 0x40, 0x800, 0x6, 0x4, 0x4c9, 0x4, 0x101, 0xf935, 0x6, 0xff, 0x8, 0x2, 0x1, 0x24, 0xeeebd4e0, 0x8, 0x80000000, 0x3, 0x6, 0x3, 0x0, 0x4, 0x7f, 0x8001, 0x3f, 0x0, 0x7f, 0xa1e, 0xffff, 0xffffffe0]}) pread64(r2, &(0x7f0000000100)=""/109, 0x6d, 0x100000001) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) recvmmsg$unix(r2, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000740)=""/129, 0x81}, {&(0x7f0000000800)=""/241, 0xf1}], 0x4, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000b40)=""/67, 0x43}, {&(0x7f0000000bc0)=""/234, 0xea}, {&(0x7f0000000cc0)=""/155, 0x9b}, {&(0x7f0000000d80)=""/185, 0xb9}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000001ec0)=@abs, 0x6e, 0xffffffffffffffff, 0x0, &(0x7f0000001f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002040)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f00000020c0)=""/225, 0xe1}], 0x1, &(0x7f0000002200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002240), 0x6e, &(0x7f00000025c0)=[{&(0x7f00000022c0)=""/190, 0xbe}, {&(0x7f0000002380)=""/173, 0xad}, {&(0x7f0000002440)=""/178, 0xb2}, {&(0x7f0000002500)=""/68, 0x44}, {&(0x7f0000002580)=""/37, 0x25}], 0x5, &(0x7f0000002640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002800)=""/43, 0x2b}, {&(0x7f0000002840)=""/224, 0xe0}, {&(0x7f0000002940)=""/137, 0x89}, {&(0x7f0000002a00)=""/170, 0xaa}], 0x4}}, {{&(0x7f0000002b00)=@abs, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/220, 0xdc}], 0x2, &(0x7f0000003cc0)}}, {{&(0x7f0000003d00), 0x6e, &(0x7f0000006280)=[{&(0x7f0000003d80)=""/58, 0x3a}, {&(0x7f0000003dc0)=""/144, 0x90}, {&(0x7f0000003e80)=""/8, 0x8}, {&(0x7f0000003ec0)=""/10, 0xa}, {&(0x7f0000007d00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/204, 0xcc}, {&(0x7f0000005000)=""/176, 0xb0}, {&(0x7f00000050c0)=""/182, 0xb6}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000006180)=""/249, 0xf9}], 0xa, &(0x7f0000006340)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="001d00001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xe8}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f00000074c0)=[{&(0x7f00000064c0)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000007500), 0x6e, &(0x7f0000007940)=[{&(0x7f0000007580)=""/64, 0x40}, {&(0x7f00000075c0)=""/155, 0x9b}, {&(0x7f0000007680)=""/68, 0x44}, {&(0x7f0000007700)=""/237, 0xed}, {&(0x7f0000007800)=""/99, 0x63}, {&(0x7f0000007880)=""/29, 0x1d}, {&(0x7f00000078c0)=""/110, 0x6e}], 0x7, &(0x7f00000079c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0xa, 0x40012000, &(0x7f0000007cc0)) 20:39:19 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:39:19 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x1000000}]}, 0x14, 0x0) [ 1478.130559] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 20:39:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/ip_mr_cache\x00') 20:39:19 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000440)="922f74fba6adda49806a9684a3ca7c332f9e7a8645c88f83d0cbbd5070902aef5b03a2bf58202d7529404dd9c227fd0d85f654c8e65471b0b2a97c996a149179c793d18bdbb1c771341b4b6af9061ce162ca2dd8fa52e770c1752d773f53502eb7d578a0b853209f55990a0da3edc1ae9b21397fb45993fb2b21591cc537051e3986257f4617ad234aa4905265ce6cf2ae2ded568113cfe2a9d58ee99c459432", 0xa0, r0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) keyctl$read(0xf, r2, &(0x7f0000000340)=""/216, 0xd8) r3 = add_key(&(0x7f0000000580)='trusted\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)="e0f32371253e54b4891f44d094489da08da341b24b2cf7a724a8d6302d73decc71fc31976717258b00b54a98cb192da3107cfd856f8c4f296dd7eb7798fbe4b4e4fa21b5c9059461", 0x48, r1) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000500)={0x2, 0x0, @b}, 0x48, r3) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/255, 0xff) [ 1478.197649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.216501] loop6: detected capacity change from 0 to 4096 [ 1478.223711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:39:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x30, r2, 0x20243000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 20:39:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7caf, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:39:19 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) lseek(r0, 0xe5, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:39:19 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0xf4}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:39:19 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x2300}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) [ 1478.345392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:39:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22c201, 0x50) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x10, r1, 0x38e50000) [ 1478.465528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1478.477086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.487449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.781772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.791923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:39:29 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x5053, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xffeffffe}) clone3(&(0x7f00000005c0)={0x10100000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0xc}, &(0x7f00000004c0)=""/236, 0xec, &(0x7f00000002c0)=""/61, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) pidfd_open(r1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:39:29 executing program 7: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0x2400}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:39:29 executing program 4: syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{}, {0xf5}, @broadcast, @broadcast}}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6, @device_b}}}}, 0x2a) 20:39:29 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000140)={r3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) 20:39:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r1, 0x0, 0x0) read$rfkill(r1, &(0x7f0000000000), 0x8) vmsplice(r0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) fcntl$notify(r1, 0x402, 0x2) 20:39:29 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="10002abd7000fedbdf254b000000080001007063690011000200303030303a30303a31302e30000000000c00a7009178000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000010", 0x8, 0x32, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r2, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x10000, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) syz_emit_ethernet(0xa9, &(0x7f0000000080)={@empty, @remote, @void, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x2, 0x2e, 0x9b, 0x64, 0x0, 0x20, 0x2, 0x0, @loopback, @loopback, {[@end, @timestamp_prespec={0x44, 0xc, 0x29, 0x3, 0x4, [{@multicast1, 0x10000}]}, @generic={0x44, 0xe, "22ad4f2bed417e66e837fc73"}, @noop, @noop, @lsrr={0x83, 0xf, 0xc5, [@remote, @multicast1, @empty]}]}}, {0x17, 0x7, 0x0, @empty, "a7cb0608ddf7f72b56932e04c85d4476e483255879da769ba4e505bcf751ca2e3ef6466f7736aeb5eec4c8374dcaff65d74f21d5d763b4558b5339c465141ea697cc34a96712b50cf757aae18d0233cec1247d"}}}}}, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@mpls_mc={0x8848, {[{0x3, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x7}, {0xff, 0x0, 0x1}, {0x1}], @generic="08ff36c44b36d123bf16e1929e1ff3678bc66364b07daeceeddfe239aef890c6118f4d2cdff0c9a6f3b7cbfdcf05bc582050499dbc823f53b0a004f57d010f0664191afe2436e3f0e27ddccb114e6c2452c4a5a16ff077584b248d079bd2d7f1698a450ccccfa14ec923a99a1ee7811e7af0796f105baeecdecc89f950bb1a7a6d6968c86d3a1d540fbabb651524b5cb7a95ff288ac4f132d59d5d3f5de54a641e4cc99eaf9bf1ac89ca7f6de1f6a71a56d715525df4df1212aa222f647f1b8233e86e7d8463633b563d2d2d"}}}}, &(0x7f0000000380)={0x1, 0x4, [0x4cd, 0xa0d, 0xb21, 0x349]}) 20:39:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000013a00)) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{}, {0x2000000}]}, 0x14, 0x0) 20:39:29 executing program 3: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000580)={{r0}, "cad6ed096bc2bae37a2c256c7a1079870d94fea101be52c4271a05e1e6629049c352bd6a2c5b946ef6dcddfe1567bb0bec9ea4311047b4e08e9631edea3665441b7eb885bcff5edec78a965a213642dff832e581d097047b5812a8e08deb4a2436ba6e39414a68609ef908da6ea9a35f0b288207916089a8f9b32d5570775b356421af0bb064102199a183f1d65d43df8e8aa02d56b89b8129896b2ca73705cf37e77595b52cb9ef401f3a83ed3ab7815eb52390f7289385fcf255f17498fa80a1266e1419f1bb19bb2992e42e003ce79bebb33f82d477129d06867e8cb296a54228cdf6c406b516b73b759504a61378663b06bf9614f63cadec5fe75742f697d6847d3d3da930a2ae06403c2094850418317ad96b9e6b56078c3b78801de33fe6b9767dcd707ee66e26b670128d22271792268cab76b376456d28f1cd99272babccba3819fdfdb1469a17e797c30a839c0ed255fa73a30b86097ef49b096bbde97d1e1f9edb63fc1704ba9e6c33ab172278c341344606ddb83c45c08aab5f3287b868272344e01f041e9e4605b98d876c979f11276a3624d65d0e0ce3af27c382076d79e9ad39e3606e924b14781670195061fbf070595ea5087eb24ed188dd33bb8fa4dbad4f5a84036c15cb78ffdb0e567a0aba93844d87b1131c83eb5f31a75cf06bc0e18d0336af055486551a186fe87e0b4747792367ddcf592ca675ed8cc59b45bd2908ee348c6373ef7e66ea4287aed58dcfacc71f174bc6a48a1b916736bf088b85f9f6c2ec5da9b1080b650577ed7cc7f4db54899043c34183f831477db4afe2bf7aa4dd42e4689c96988f84c51103ff23d7558e5e4b99bf8ec0d55a89183e17b4561d38ac75f80415907851e81e1fdef0a08a161ce5a000fd7c6e69e0e2f09dc8b4fdb9963b5b2846b64bd02be9796ed8246fb6350b887d6afea906241c5b118648fdaf6db83043268e1ff568893e11ee2991f6094e20375e9d4d2a878aa34659d0f758ade2ec5cf2309406b6c321056556480db159dd8c26ae63fcbd622a6ecab41eee0ba3e97ac6cbeebc478946245c63b78da2dbac8b8b2552ffe47e33380037b942a261bc94e427d4a2af56936d51af05e1897dd80ceafe0811b19bc8c748e868f0b1fb7ac6e072b77c1a7542dc029797fd496ae95c48ad4d8ed36db2837d0a938fff25486955fb5f6c4e3c4bc4d9fc28913d2a3cab922d6e1402024fad30c6865bcf9b6c2e4492d906d46383dd830a5daa7425f515e8557731c866ec8f5dd60fb1cc8cf82e222494018f6c8e66513ffa6ae18808f4507261188a6303766c896a09cd1da34c88ee9bb8d87a17ceb492cf062d625439aee3779d1488271a74ea4095b1a7bb53e276c0c5eec8bee94d3689339e6e6d98bb24b74c6edde765e5855a67acf85e9719ae1bfb9cce8994a4ef8b7bfd188698a18a4df529c173f35d40c3251feef025a2fc3ea261e06fa4915fddc1c055af8e1cc25a8f32543240bdab33084e9e48510bc60d5e8bbb565b4b95701904ce7e6626121a146d8636236a05ce46039df13f76601d360ddfb4fafca071715e5852eede4288250893fa74ccc830b4f5b01aba127d70f6c2d88f1e5af7e59ea7953ff74ad6f90fc6dcee08d67acd4a071ed6fd214e5aee1f452ee06bb1609ff48fce7b27546c11b53f4f4de1f61c3c4f4a249f8cdff6272a8e63264dc118c95566dc310d5d4824d01692cb24d2ca7c7b266669ca273560bc336617baff015d7b52a7b9cf51dfa0a8de65879e4aef206efa96b34e07f4e235e74cbf8a543b90733575c896c2b44017f7df10dda29ef8342d5cac26c080b57f68d3611dee37cd7440254ec3f026c62c0526c87588b88aa4adb1a2bfb0c810535359979706b9e5612b2a6fff6fc2cac0b62a20106a847bbced48453114ce619eb3aa928721937122af297d64c86001b44017b531b6e314d21bec3615b2e5377b9b014b23d1a9b931cdbd04b91a8f21918b9fd806c2e89799215c20690152148508b9f1a06e7717b4f17a1fab6fdc2e5cd1c8abebfe415fc53df9237786c1ba4d0003284909875a678bf6b7cdfbf3f929793b94edd41de764c19521c3e6641c8853f315d6827c3fa1713c4fbe4258fec6a8c3c4eecab1cdea7380cade64526f0d3645b7c798b4d1a877eee625b0207f46385eb848f55e08ad1681fdb7317a8dba2fc594a2aca9cb5a88670a909e5e943da682474c5d84e8742f9308c483b5158febee73fefebc56f911466dc676fd37ee3ab83e1cf16d66debfc2441d1a6a5e994a4acf0f9be681944386ead07f0af82311a707d24a46b36012d5cc79a36bc1e123e5a9150e77a46982aa09f96f42178baddcbef757d9f858791ec9cac6781adde8e7eb6e77dcec65188782328316bf9abb2c24f76fb47bb4a530f17fc8a5e90d11cbc54c5d70a0b7172bd866ffabc94d4875d0f07abd7c0b814608353df1b6d1b998968cd272c47da3b8dff7bdf62af9765cca90a4cc835d786f5d9d19307743f4892e754e69a65db9efa81e4a7508ae5d8426ade4d5031ccd167bc61cd74a0eaa5fab7961beb36f8a478f5bff554aa34dfbea666d2924f2c1f13232c6fe1ac8a4be3d474dbbff3a1ce86359a4245ef3f4728dbdee1e2b518fc59474bb59331f3afa43935782e19b53885807d25b8256795a2771ad941aaff0f0adab51358960f673c4f50917baf3856098bca06997c608eb5a31cd991c521b2469bac180966ae54574c4b03d3b2383e81e388d9039d00708f755f3f399daae5eb99700e5b473444db3458ae1d72bdd2294b9e0ca592a24c6fd7b2f7142bba44e408a4b3727654e9398a29a34ee4ac8860022c45f834170929e58746a0ce6dac422e04ad27c32b367fd3808bb8174d7971acc7a478d490ca0742db7ad2fe357dd662fe004c309b286cd2f343e3c8f1284e476b91501c44a3f4c809748227404ab0b75bf1cdd9e9762d26ce2acca962e10b0748ac4c5c38b68ac07f91ba573bbe7c6c7ac13329438ab392672c0c7a24076eb44943ba06c7df24338f15f2ff71d513f8a815f15b11b0dfdd41a79efa217fb804c09e5732fe33ebf2279f28cea868e251c72b5f882b57cea58ee24932e9888ebdfb7f96ed02323616532171bfae6c70539a3ec2a841bd718923b7487dc61982e39a1f909c51b4c20fe8c3d41e900aa9c3825a2ac7d0fcedc0cf3d4dbc566ae47b0cd62c3d5420d8af07c928c67689151c69bdf3c6b285b01163461cf246d5df6a5f60a6c375fd75f6ded837027a5c917e37163549e15d2ecd19d5765460e2f4365daaa520b7e837648edb149bed61bba216870e6bb5ce0cb1ff35bc6c62de3a3c96ce91654fb62f27639660a43058caec9a50208ba4cbadefb719f795e626406113cb5c28f185f591dfb76dc94b9bb3d071cdf494bcb296ca4f6a5cfb93facac3fdfcc0362ad05736afe3f6cb094492d464a23ae18ee20860cdd792da9d3e9e8c940d0a8edf54239d8771a7523f42cfca639ea18a8cb66b7b9e713b26e833fcfd8942643a3df4349c627552477cc0e437f6e2a590038e0412a164730c74a98663ca2bc68b4686900a9a60f26f6eacf68093063cda81ab7d23b2db7b6105087cadf57d5b0447320b1f409cd3c7d8227f4f78bab7eb185121de94ec4ae4e4a3a83f7adcb8d7965134d1c43e01309954fba8f9c0210a09f1725117cdbfb1144d63d7e81ebb1574efb384089ff41a08a4fc4ed9be81ccabcf99afa32bbdbe2da1f582811324c155ac1e796a9a083d03bc893e61500be7415e68e8d5b3805ef199e32f61d1ea3938a18a903ed191ad3654a226b5cbd6b9ac57f725616c9d69ac145beb70b10e63a809b287f2783ece9909ab194dd7264e1992e69ab983ebcb599df7191e1da56969a0e9fa919170bcfc0c2c95137aad85eb0dc18644016f83c724d5a4c65e15a3c3ef802bb1da231b7556fb4d8f19a3f1e3053c2eece393ebe7ed5af1f029e34f0cb7c1c045248b29cd856c06ecc815acc1c8cb3ec6991aa9e16b16096f0947099fda610a92690adaef8e672a89959489d47411f40f01ea679b7dcff87f15fd752ad2a07a1a4094364a3969dd95ebd56dab24f116da15923affd81f5bbf808207ba11b66887ea2e280abf103ca8c66d061e7479285ed0ee791007f2e6e90670b3cf78c2e7b3ea4f6dc0ad3bf9a6703d9ff7455389d5fb3e047b608148f55721266fcb8f6acbc210cdb266f0f63ba13ca33f45f969a1ea0e14f4d96abee4a9f027d40f24c642275d37671d7e78e702a2522bf07b3954ee8d14a7c6c02a91d3a0d8564244617a3acc68c869f94a57014f9495dc404e0354b4b05a03e39f5a89a8834616a2c3a08435c32eb7b7be80a1b47ff578335041805b735dca72e55940f24390f6552da428e0877ad5931cfc14994a9793fd126f05757f7475e221464020eb10648eac6501615904820e630ebbe07f10a806534585a1993eb6e75f4ae0e02cafa64441b3bded7a6d7f278806676baa68ebe04b54c2cf02cba2ee9b09619e035753463d66601187de1ba0eca70a008aa531c9dab5739b63bb348524185185a28faad95c29ca0546b967af6b078723cce5f97b328679703e7fb7f982095062825f4dcf5403ba1711d17e17dc0ee08141763cf80a89d2864ec14a3ce04ad13beaf3b690ba0af68bb37959ed85e6789d5d304d77a5de07a4688d244579fb6574e7ae485442c632234dc9f52d317680d7c2263ca16c579c5f9f6115d0c5dc260b1e20ef62c4f1c24d577f8a6f865ff6c6ed51628c992f03aca7bc407a697b01b86d3a17cfbeec9220eac67fb3714afa4213f05c936b8ff8ed59366f840e9ce1fafd36d2684b87d0bf7f2e9acdc417509da1e56ad50adace67ced5737886914d60fb84c9e672b45fadae9122cd6830adeb62776957553f50c7ad059e042002a47f3b6d45bbe41b49a9e5ad15021b1fedcf30d770c1a371bc05051ec8c35eeb998eedeeac61f31cb4a18aed9fe4924866668106c8762e34e2333719c454f0d28fa450ba4924bbf4d94046fc0d43d35088713320573066a538faf7240a92d2dd179f0d28bfa84377eed556df8e1a712b3818b43da7a2062cd457182734a401db66a8abd14af2f383a4c3c6acdf9ec7c88e88371e9c18b7a37ed6e51e4fa4f16a00df1d2fa5d3f6d3eb7c7501b58ad17abaa64e497a55d30391527afeba1f1e0af38d982a931033ffc5bc0c00fe2e04a05161e0657a32b9dbe3541d399170171519a42ea83a888933bb45d2947890649b3a97f89f71ec558829cf2224835413b851990bd6f615bc6690a9dc3f040112dbf3239fd363a8f179cce2e89c84744d0bf01a6ee71bb275616f2662744650c9b64733e7c9cef7b6c5dbc76d2dcc2afe03e669cde45cf5dc9e467a0142bab10bfae30a59928413da3f903d0b7b71315c34e63af0edf9b35a20aa8fa46ed3659a5a00d48506a3f22ebcf82d451ec90013d19dba67f20d0ba5b043e628863f00b2f25ca82ee8d9558cc609f39510e9bfe99904697bedaf4613be2f32403efbc59b79f76e0f6aa74bb1fe7843f999473f8646ffa254969dcd2c0526ef1c701beb859ed2b5a3c4cc0f67c04f652d21e1b3fa3abb7f82cfc83f248c193ac3979927d01debf7059124d3b79ce06302231ee20b765397c2106f20c8f7a9049591e7f49f1dfa6589586a61a5a553e9e03bb3029e04c6e06a624bbf30d2293c01835a589bad99a20fd9cc269d43c93e0be5eccce2172742b8b1a041ac16638a589ffb245b9bef58e1373bb2352d55f"}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000540)={0x79b, 0xfffff801, 0x3, 0x4, 0x1}) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 1488.381344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1488.399914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1488.403463] loop6: detected capacity change from 0 to 4096 20:39:29 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r1, 0x20, 0x207a, 0x1ff) [ 1488.457642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 20:39:29 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000100)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x1) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x0, 0x6, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000340)="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", 0x1000) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)}, {0x0}], 0x9, 0x0) 20:39:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x2, 0x7f, 0xa, 0x0, 0x8, 0x20850, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x800, 0x4, 0x1, 0x3, 0xfc, 0x9, 0x0, 0x6, 0x0, 0xf2}, 0xffffffffffffffff, 0xf, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x50, r1, 0x8dda2000) read$rfkill(0xffffffffffffffff, &(0x7f0000000140), 0x8) [ 1488.569409] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.599253] audit: type=1400 audit(1756154369.661:32): avc: denied { relabelto } for pid=16652 comm="syz-executor.1" name="PACKET" dev="sockfs" ino=31786 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:vmware_device_t:s0 tclass=packet_socket permissive=1 [ 1488.615762] audit: type=1400 audit(1756154369.679:33): avc: denied { map } for pid=16652 comm="syz-executor.1" path="socket:[31788]" dev="sockfs" ino=31788 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:vmware_device_t:s0 tclass=sock_file permissive=1 [ 1488.623116] audit: type=1400 audit(1756154369.680:34): avc: denied { read } for pid=16652 comm="syz-executor.1" path="socket:[31788]" dev="sockfs" ino=31788 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:vmware_device_t:s0 tclass=sock_file permissive=1 [ 1488.696533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1488.714014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1491.189625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1491.192353] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1491.197041] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1491.201525] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1491.204164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1493.225778] Bluetooth: hci1: command tx timeout [ 1495.273754] Bluetooth: hci1: command tx timeout [ 1497.322816] Bluetooth: hci1: command tx timeout [ 1499.369779] Bluetooth: hci1: command tx timeout [ 1507.886409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.887570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.925447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.928857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.156125] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888016af8340 (size 704): comm "syz-executor.2", pid 16720, jiffies 4296158102 hex dump (first 32 bytes): ff ff ff ff 00 00 00 00 04 0e 0a 01 09 10 00 aa ................ aa aa aa aa aa ff ff ff 88 4a ab 87 ff ff ff ff .........J...... backtrace (crc d9ff32e6): kmem_cache_alloc_node_noprof+0x30f/0x3e0 kmalloc_reserve+0x189/0x2b0 __alloc_skb+0x161/0x370 vhci_write+0xbb/0x480 do_iter_readv_writev+0x5af/0x910 vfs_writev+0x2d4/0xcd0 do_writev+0x129/0x330 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88800f52e000 (size 232): comm "kworker/u11:2", pid 16719, jiffies 4296158102 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc bdc70eb4): kmem_cache_alloc_noprof+0x2fe/0x3d0 skb_clone+0x191/0x400 hci_event_packet+0x2d6/0x10e0 hci_rx_work+0x96c/0x1270 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: leak checking failed VM DIAGNOSIS: 20:40:07 Registers: info registers vcpu 0 RAX=0000000000541ae3 RBX=0000000000000000 RCX=ffffffff84bad5f7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c52b4 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8643a050 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bac31e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55e0000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff316baae0 CR3=000000002006d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934303720657a697328203034333866 XMM03=3120646970202c22322e726f74756365 XMM04=202020200a2e2e2e2e2e2e2e2e2e2e2e XMM05=39302031302061302065302034302030 XMM06=206666206666202020200a3a29736574 XMM07=642078656820200a3230313835313639 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000099bc2d RBX=0000000000000001 RCX=ffffffff84bad5f7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c52b4 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8643a050 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bac31e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56e0000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005580dc29c52c CR3=000000002006d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934303720657a697328203034333866 XMM03=3120646970202c22322e726f74756365 XMM04=202020200a2e2e2e2e2e2e2e2e2e2e2e XMM05=39302031302061302065302034302030 XMM06=206666206666202020200a3a29736574 XMM07=642078656820200a3230313835313639 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000