Warning: Permanently added '[localhost]:49946' (ECDSA) to the list of known hosts. 2023/03/27 12:18:03 fuzzer started 2023/03/27 12:18:03 dialing manager at localhost:45291 syzkaller login: [ 35.608715] cgroup: Unknown subsys name 'net' [ 35.703153] cgroup: Unknown subsys name 'rlimit' 2023/03/27 12:18:17 syscalls: 2217 2023/03/27 12:18:17 code coverage: enabled 2023/03/27 12:18:17 comparison tracing: enabled 2023/03/27 12:18:17 extra coverage: enabled 2023/03/27 12:18:17 setuid sandbox: enabled 2023/03/27 12:18:17 namespace sandbox: enabled 2023/03/27 12:18:17 Android sandbox: enabled 2023/03/27 12:18:17 fault injection: enabled 2023/03/27 12:18:17 leak checking: enabled 2023/03/27 12:18:17 net packet injection: enabled 2023/03/27 12:18:17 net device setup: enabled 2023/03/27 12:18:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/03/27 12:18:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/03/27 12:18:17 USB emulation: enabled 2023/03/27 12:18:17 hci packet injection: enabled 2023/03/27 12:18:17 wifi device emulation: enabled 2023/03/27 12:18:17 802.15.4 emulation: enabled 2023/03/27 12:18:17 fetching corpus: 0, signal 0/2000 (executing program) 2023/03/27 12:18:17 fetching corpus: 50, signal 29965/33535 (executing program) 2023/03/27 12:18:17 fetching corpus: 100, signal 43062/48124 (executing program) 2023/03/27 12:18:17 fetching corpus: 150, signal 52868/59284 (executing program) 2023/03/27 12:18:17 fetching corpus: 200, signal 62102/69838 (executing program) 2023/03/27 12:18:17 fetching corpus: 250, signal 67720/76705 (executing program) 2023/03/27 12:18:18 fetching corpus: 300, signal 74860/84952 (executing program) 2023/03/27 12:18:18 fetching corpus: 350, signal 79028/90302 (executing program) 2023/03/27 12:18:18 fetching corpus: 400, signal 82995/95454 (executing program) 2023/03/27 12:18:18 fetching corpus: 450, signal 88363/101789 (executing program) 2023/03/27 12:18:18 fetching corpus: 500, signal 93066/107490 (executing program) 2023/03/27 12:18:18 fetching corpus: 550, signal 97896/113193 (executing program) 2023/03/27 12:18:18 fetching corpus: 600, signal 101755/117892 (executing program) 2023/03/27 12:18:18 fetching corpus: 650, signal 105759/122728 (executing program) 2023/03/27 12:18:19 fetching corpus: 700, signal 108564/126427 (executing program) 2023/03/27 12:18:19 fetching corpus: 750, signal 110200/129072 (executing program) 2023/03/27 12:18:19 fetching corpus: 800, signal 113074/132832 (executing program) 2023/03/27 12:18:19 fetching corpus: 850, signal 116160/136669 (executing program) 2023/03/27 12:18:19 fetching corpus: 900, signal 118161/139543 (executing program) 2023/03/27 12:18:19 fetching corpus: 950, signal 120698/142757 (executing program) 2023/03/27 12:18:19 fetching corpus: 1000, signal 122614/145429 (executing program) 2023/03/27 12:18:19 fetching corpus: 1050, signal 124553/148152 (executing program) 2023/03/27 12:18:20 fetching corpus: 1100, signal 127795/151905 (executing program) 2023/03/27 12:18:20 fetching corpus: 1150, signal 130334/154989 (executing program) 2023/03/27 12:18:20 fetching corpus: 1200, signal 132010/157348 (executing program) 2023/03/27 12:18:20 fetching corpus: 1250, signal 133590/159620 (executing program) 2023/03/27 12:18:20 fetching corpus: 1300, signal 135774/162373 (executing program) 2023/03/27 12:18:20 fetching corpus: 1350, signal 138051/165164 (executing program) 2023/03/27 12:18:20 fetching corpus: 1400, signal 139533/167240 (executing program) 2023/03/27 12:18:20 fetching corpus: 1450, signal 140711/169134 (executing program) 2023/03/27 12:18:21 fetching corpus: 1500, signal 141809/170940 (executing program) 2023/03/27 12:18:21 fetching corpus: 1550, signal 143671/173269 (executing program) 2023/03/27 12:18:21 fetching corpus: 1600, signal 144884/175081 (executing program) 2023/03/27 12:18:21 fetching corpus: 1650, signal 147086/177664 (executing program) 2023/03/27 12:18:21 fetching corpus: 1700, signal 148257/179465 (executing program) 2023/03/27 12:18:21 fetching corpus: 1750, signal 151341/182654 (executing program) 2023/03/27 12:18:21 fetching corpus: 1800, signal 152900/184662 (executing program) 2023/03/27 12:18:21 fetching corpus: 1850, signal 154370/186580 (executing program) 2023/03/27 12:18:21 fetching corpus: 1900, signal 155884/188532 (executing program) 2023/03/27 12:18:22 fetching corpus: 1950, signal 157110/190214 (executing program) 2023/03/27 12:18:22 fetching corpus: 2000, signal 158109/191723 (executing program) 2023/03/27 12:18:22 fetching corpus: 2050, signal 159303/193325 (executing program) 2023/03/27 12:18:22 fetching corpus: 2100, signal 160819/195135 (executing program) 2023/03/27 12:18:22 fetching corpus: 2150, signal 161675/196512 (executing program) 2023/03/27 12:18:22 fetching corpus: 2200, signal 163035/198216 (executing program) 2023/03/27 12:18:22 fetching corpus: 2250, signal 164761/200140 (executing program) 2023/03/27 12:18:22 fetching corpus: 2300, signal 166392/201991 (executing program) 2023/03/27 12:18:23 fetching corpus: 2350, signal 168008/203768 (executing program) 2023/03/27 12:18:23 fetching corpus: 2400, signal 169406/205388 (executing program) 2023/03/27 12:18:23 fetching corpus: 2450, signal 170470/206775 (executing program) 2023/03/27 12:18:23 fetching corpus: 2500, signal 171335/208078 (executing program) 2023/03/27 12:18:23 fetching corpus: 2550, signal 172863/209739 (executing program) 2023/03/27 12:18:23 fetching corpus: 2600, signal 174062/211137 (executing program) 2023/03/27 12:18:23 fetching corpus: 2650, signal 175019/212439 (executing program) 2023/03/27 12:18:23 fetching corpus: 2700, signal 176410/213953 (executing program) 2023/03/27 12:18:24 fetching corpus: 2750, signal 177357/215176 (executing program) 2023/03/27 12:18:24 fetching corpus: 2800, signal 178378/216467 (executing program) 2023/03/27 12:18:24 fetching corpus: 2850, signal 178977/217476 (executing program) 2023/03/27 12:18:24 fetching corpus: 2900, signal 179953/218699 (executing program) 2023/03/27 12:18:24 fetching corpus: 2950, signal 180799/219797 (executing program) 2023/03/27 12:18:24 fetching corpus: 3000, signal 181646/220884 (executing program) 2023/03/27 12:18:24 fetching corpus: 3050, signal 182594/222075 (executing program) 2023/03/27 12:18:24 fetching corpus: 3100, signal 183503/223234 (executing program) 2023/03/27 12:18:24 fetching corpus: 3150, signal 184207/224244 (executing program) 2023/03/27 12:18:25 fetching corpus: 3200, signal 184972/225275 (executing program) 2023/03/27 12:18:25 fetching corpus: 3250, signal 186314/226586 (executing program) 2023/03/27 12:18:25 fetching corpus: 3300, signal 187538/227803 (executing program) 2023/03/27 12:18:25 fetching corpus: 3350, signal 188376/228802 (executing program) 2023/03/27 12:18:25 fetching corpus: 3400, signal 189042/229676 (executing program) 2023/03/27 12:18:25 fetching corpus: 3450, signal 189806/230649 (executing program) 2023/03/27 12:18:25 fetching corpus: 3500, signal 190300/231499 (executing program) 2023/03/27 12:18:25 fetching corpus: 3550, signal 190729/232312 (executing program) 2023/03/27 12:18:25 fetching corpus: 3600, signal 191559/233281 (executing program) 2023/03/27 12:18:26 fetching corpus: 3650, signal 192362/234233 (executing program) 2023/03/27 12:18:26 fetching corpus: 3700, signal 192970/235062 (executing program) 2023/03/27 12:18:26 fetching corpus: 3750, signal 193917/236004 (executing program) 2023/03/27 12:18:26 fetching corpus: 3800, signal 194816/236921 (executing program) 2023/03/27 12:18:26 fetching corpus: 3850, signal 195411/237669 (executing program) 2023/03/27 12:18:26 fetching corpus: 3900, signal 195997/238442 (executing program) 2023/03/27 12:18:26 fetching corpus: 3950, signal 196490/239163 (executing program) 2023/03/27 12:18:26 fetching corpus: 4000, signal 197923/240256 (executing program) 2023/03/27 12:18:26 fetching corpus: 4050, signal 198735/241092 (executing program) 2023/03/27 12:18:27 fetching corpus: 4100, signal 199447/241890 (executing program) 2023/03/27 12:18:27 fetching corpus: 4150, signal 200061/242601 (executing program) 2023/03/27 12:18:27 fetching corpus: 4200, signal 200672/243324 (executing program) 2023/03/27 12:18:27 fetching corpus: 4250, signal 201386/244099 (executing program) 2023/03/27 12:18:27 fetching corpus: 4300, signal 202258/244889 (executing program) 2023/03/27 12:18:27 fetching corpus: 4350, signal 203052/245678 (executing program) 2023/03/27 12:18:27 fetching corpus: 4400, signal 203775/246432 (executing program) 2023/03/27 12:18:27 fetching corpus: 4450, signal 204391/247110 (executing program) 2023/03/27 12:18:27 fetching corpus: 4500, signal 204744/247729 (executing program) 2023/03/27 12:18:28 fetching corpus: 4550, signal 205382/248369 (executing program) 2023/03/27 12:18:28 fetching corpus: 4600, signal 206066/249026 (executing program) 2023/03/27 12:18:28 fetching corpus: 4650, signal 206764/249676 (executing program) 2023/03/27 12:18:28 fetching corpus: 4700, signal 207406/250326 (executing program) 2023/03/27 12:18:28 fetching corpus: 4750, signal 208062/250950 (executing program) 2023/03/27 12:18:28 fetching corpus: 4800, signal 209055/251684 (executing program) 2023/03/27 12:18:28 fetching corpus: 4850, signal 209873/252337 (executing program) 2023/03/27 12:18:28 fetching corpus: 4900, signal 210548/252907 (executing program) 2023/03/27 12:18:28 fetching corpus: 4950, signal 211350/253540 (executing program) 2023/03/27 12:18:29 fetching corpus: 5000, signal 212062/254172 (executing program) 2023/03/27 12:18:29 fetching corpus: 5050, signal 212641/254696 (executing program) 2023/03/27 12:18:29 fetching corpus: 5100, signal 212995/255206 (executing program) 2023/03/27 12:18:29 fetching corpus: 5150, signal 213595/255753 (executing program) 2023/03/27 12:18:29 fetching corpus: 5200, signal 214197/256288 (executing program) 2023/03/27 12:18:29 fetching corpus: 5250, signal 214598/256786 (executing program) 2023/03/27 12:18:29 fetching corpus: 5300, signal 215281/257307 (executing program) 2023/03/27 12:18:29 fetching corpus: 5350, signal 216007/257827 (executing program) 2023/03/27 12:18:30 fetching corpus: 5400, signal 216372/258275 (executing program) 2023/03/27 12:18:30 fetching corpus: 5450, signal 217042/258797 (executing program) 2023/03/27 12:18:30 fetching corpus: 5500, signal 217566/259247 (executing program) 2023/03/27 12:18:30 fetching corpus: 5550, signal 217952/259666 (executing program) 2023/03/27 12:18:30 fetching corpus: 5600, signal 218344/260074 (executing program) 2023/03/27 12:18:30 fetching corpus: 5650, signal 218728/260475 (executing program) 2023/03/27 12:18:30 fetching corpus: 5700, signal 219245/260887 (executing program) 2023/03/27 12:18:30 fetching corpus: 5750, signal 219588/261328 (executing program) 2023/03/27 12:18:30 fetching corpus: 5800, signal 220039/261714 (executing program) 2023/03/27 12:18:31 fetching corpus: 5850, signal 220600/262131 (executing program) 2023/03/27 12:18:31 fetching corpus: 5900, signal 221396/262560 (executing program) 2023/03/27 12:18:31 fetching corpus: 5950, signal 221744/262987 (executing program) 2023/03/27 12:18:31 fetching corpus: 6000, signal 222228/263381 (executing program) 2023/03/27 12:18:31 fetching corpus: 6050, signal 222737/263740 (executing program) 2023/03/27 12:18:31 fetching corpus: 6100, signal 223216/264101 (executing program) 2023/03/27 12:18:31 fetching corpus: 6150, signal 223875/264480 (executing program) 2023/03/27 12:18:31 fetching corpus: 6200, signal 224265/264852 (executing program) 2023/03/27 12:18:31 fetching corpus: 6250, signal 225026/265215 (executing program) 2023/03/27 12:18:32 fetching corpus: 6300, signal 225632/265587 (executing program) 2023/03/27 12:18:32 fetching corpus: 6350, signal 226165/265945 (executing program) 2023/03/27 12:18:32 fetching corpus: 6400, signal 226566/266243 (executing program) 2023/03/27 12:18:32 fetching corpus: 6450, signal 227021/266563 (executing program) 2023/03/27 12:18:32 fetching corpus: 6500, signal 227381/266866 (executing program) 2023/03/27 12:18:32 fetching corpus: 6550, signal 227891/267171 (executing program) 2023/03/27 12:18:32 fetching corpus: 6600, signal 228468/267458 (executing program) 2023/03/27 12:18:32 fetching corpus: 6650, signal 228937/267653 (executing program) 2023/03/27 12:18:32 fetching corpus: 6700, signal 229446/267665 (executing program) 2023/03/27 12:18:33 fetching corpus: 6750, signal 229950/267669 (executing program) 2023/03/27 12:18:33 fetching corpus: 6800, signal 230525/267669 (executing program) 2023/03/27 12:18:33 fetching corpus: 6850, signal 230974/267669 (executing program) 2023/03/27 12:18:33 fetching corpus: 6900, signal 231405/267669 (executing program) 2023/03/27 12:18:33 fetching corpus: 6950, signal 231756/267669 (executing program) 2023/03/27 12:18:33 fetching corpus: 7000, signal 232377/267673 (executing program) 2023/03/27 12:18:33 fetching corpus: 7050, signal 232652/267673 (executing program) 2023/03/27 12:18:33 fetching corpus: 7100, signal 233024/267673 (executing program) 2023/03/27 12:18:33 fetching corpus: 7150, signal 233435/267688 (executing program) 2023/03/27 12:18:33 fetching corpus: 7200, signal 234286/267688 (executing program) 2023/03/27 12:18:33 fetching corpus: 7250, signal 234890/267689 (executing program) 2023/03/27 12:18:34 fetching corpus: 7300, signal 235284/267689 (executing program) 2023/03/27 12:18:34 fetching corpus: 7350, signal 235569/267689 (executing program) 2023/03/27 12:18:34 fetching corpus: 7400, signal 236028/267694 (executing program) 2023/03/27 12:18:34 fetching corpus: 7450, signal 236303/267694 (executing program) 2023/03/27 12:18:34 fetching corpus: 7500, signal 236795/267694 (executing program) 2023/03/27 12:18:34 fetching corpus: 7550, signal 237327/267694 (executing program) 2023/03/27 12:18:34 fetching corpus: 7600, signal 237800/267699 (executing program) 2023/03/27 12:18:34 fetching corpus: 7650, signal 238123/267699 (executing program) 2023/03/27 12:18:35 fetching corpus: 7700, signal 238501/267699 (executing program) 2023/03/27 12:18:35 fetching corpus: 7750, signal 238932/267699 (executing program) 2023/03/27 12:18:35 fetching corpus: 7800, signal 239340/267699 (executing program) 2023/03/27 12:18:35 fetching corpus: 7850, signal 239650/267700 (executing program) 2023/03/27 12:18:35 fetching corpus: 7900, signal 240176/267702 (executing program) 2023/03/27 12:18:35 fetching corpus: 7950, signal 240427/267703 (executing program) 2023/03/27 12:18:35 fetching corpus: 8000, signal 240725/267703 (executing program) 2023/03/27 12:18:35 fetching corpus: 8050, signal 240994/267703 (executing program) 2023/03/27 12:18:35 fetching corpus: 8100, signal 241359/267703 (executing program) 2023/03/27 12:18:35 fetching corpus: 8150, signal 241804/267703 (executing program) 2023/03/27 12:18:36 fetching corpus: 8200, signal 242303/267703 (executing program) 2023/03/27 12:18:36 fetching corpus: 8250, signal 242643/267703 (executing program) 2023/03/27 12:18:36 fetching corpus: 8300, signal 243354/267704 (executing program) 2023/03/27 12:18:36 fetching corpus: 8350, signal 243767/267704 (executing program) 2023/03/27 12:18:36 fetching corpus: 8400, signal 244117/267704 (executing program) 2023/03/27 12:18:36 fetching corpus: 8450, signal 244426/267704 (executing program) 2023/03/27 12:18:36 fetching corpus: 8500, signal 244814/267704 (executing program) 2023/03/27 12:18:36 fetching corpus: 8550, signal 245242/267704 (executing program) 2023/03/27 12:18:36 fetching corpus: 8600, signal 245611/267705 (executing program) 2023/03/27 12:18:36 fetching corpus: 8650, signal 245938/267705 (executing program) 2023/03/27 12:18:37 fetching corpus: 8700, signal 246406/267715 (executing program) 2023/03/27 12:18:37 fetching corpus: 8750, signal 246652/267716 (executing program) 2023/03/27 12:18:37 fetching corpus: 8800, signal 247049/267716 (executing program) 2023/03/27 12:18:37 fetching corpus: 8850, signal 247338/267716 (executing program) 2023/03/27 12:18:37 fetching corpus: 8900, signal 247796/267716 (executing program) 2023/03/27 12:18:37 fetching corpus: 8950, signal 248158/267719 (executing program) 2023/03/27 12:18:37 fetching corpus: 9000, signal 248542/267719 (executing program) 2023/03/27 12:18:37 fetching corpus: 9050, signal 248825/267719 (executing program) 2023/03/27 12:18:37 fetching corpus: 9100, signal 249179/267719 (executing program) 2023/03/27 12:18:38 fetching corpus: 9150, signal 249466/267719 (executing program) 2023/03/27 12:18:38 fetching corpus: 9200, signal 249798/267719 (executing program) 2023/03/27 12:18:38 fetching corpus: 9250, signal 250067/267723 (executing program) 2023/03/27 12:18:38 fetching corpus: 9300, signal 250521/267723 (executing program) 2023/03/27 12:18:38 fetching corpus: 9350, signal 250759/267725 (executing program) 2023/03/27 12:18:38 fetching corpus: 9400, signal 251062/267728 (executing program) 2023/03/27 12:18:38 fetching corpus: 9450, signal 251382/267728 (executing program) 2023/03/27 12:18:38 fetching corpus: 9500, signal 251727/267728 (executing program) 2023/03/27 12:18:39 fetching corpus: 9550, signal 252169/267728 (executing program) 2023/03/27 12:18:39 fetching corpus: 9600, signal 252463/267728 (executing program) 2023/03/27 12:18:39 fetching corpus: 9650, signal 252687/267729 (executing program) 2023/03/27 12:18:39 fetching corpus: 9700, signal 252993/267729 (executing program) 2023/03/27 12:18:39 fetching corpus: 9750, signal 253270/267732 (executing program) 2023/03/27 12:18:39 fetching corpus: 9800, signal 253640/267733 (executing program) 2023/03/27 12:18:39 fetching corpus: 9850, signal 254059/267733 (executing program) 2023/03/27 12:18:39 fetching corpus: 9900, signal 254330/267733 (executing program) 2023/03/27 12:18:39 fetching corpus: 9950, signal 254559/267733 (executing program) 2023/03/27 12:18:39 fetching corpus: 10000, signal 254901/267741 (executing program) 2023/03/27 12:18:39 fetching corpus: 10050, signal 255216/267741 (executing program) 2023/03/27 12:18:40 fetching corpus: 10100, signal 255716/267741 (executing program) 2023/03/27 12:18:40 fetching corpus: 10150, signal 256078/267741 (executing program) 2023/03/27 12:18:40 fetching corpus: 10200, signal 256429/267741 (executing program) 2023/03/27 12:18:40 fetching corpus: 10250, signal 256637/267741 (executing program) 2023/03/27 12:18:40 fetching corpus: 10300, signal 256911/267741 (executing program) 2023/03/27 12:18:40 fetching corpus: 10350, signal 257204/267741 (executing program) 2023/03/27 12:18:40 fetching corpus: 10400, signal 257611/267748 (executing program) 2023/03/27 12:18:40 fetching corpus: 10450, signal 257835/267748 (executing program) 2023/03/27 12:18:40 fetching corpus: 10500, signal 258077/267748 (executing program) 2023/03/27 12:18:41 fetching corpus: 10550, signal 258442/267748 (executing program) 2023/03/27 12:18:41 fetching corpus: 10600, signal 258604/267748 (executing program) 2023/03/27 12:18:41 fetching corpus: 10650, signal 258849/267748 (executing program) 2023/03/27 12:18:41 fetching corpus: 10700, signal 259171/267748 (executing program) 2023/03/27 12:18:41 fetching corpus: 10750, signal 259463/267748 (executing program) 2023/03/27 12:18:41 fetching corpus: 10800, signal 259694/267758 (executing program) 2023/03/27 12:18:41 fetching corpus: 10850, signal 260028/267758 (executing program) 2023/03/27 12:18:41 fetching corpus: 10900, signal 260294/267758 (executing program) 2023/03/27 12:18:41 fetching corpus: 10950, signal 260934/267758 (executing program) 2023/03/27 12:18:42 fetching corpus: 11000, signal 261343/267758 (executing program) 2023/03/27 12:18:42 fetching corpus: 11050, signal 261563/267758 (executing program) 2023/03/27 12:18:42 fetching corpus: 11100, signal 261992/267758 (executing program) 2023/03/27 12:18:42 fetching corpus: 11150, signal 262308/267760 (executing program) 2023/03/27 12:18:42 fetching corpus: 11200, signal 262651/267764 (executing program) 2023/03/27 12:18:42 fetching corpus: 11250, signal 263747/267764 (executing program) 2023/03/27 12:18:42 fetching corpus: 11300, signal 264005/267764 (executing program) 2023/03/27 12:18:42 fetching corpus: 11350, signal 264282/267782 (executing program) 2023/03/27 12:18:42 fetching corpus: 11374, signal 264478/267782 (executing program) 2023/03/27 12:18:42 fetching corpus: 11374, signal 264478/267782 (executing program) 2023/03/27 12:18:45 starting 8 fuzzer processes 12:18:45 executing program 0: r0 = io_uring_setup(0xea0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) dup3(r1, r0, 0x0) 12:18:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x122, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:18:45 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r1) 12:18:45 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)="e0686d0b2aef6464c4dc37c6199b288ab2dfe6ef550cfc0fc3987306eb232101aba03385fe12fcd9038a8ba74995d0ffbb58d7ec7b6905b489e1eec4c7e967eb004688126d7da59c68fd2e18a345970ca2ceed407b9126932519ec9606468fd2ce98bf859ce9f5fad9dd2a35dea6f6d02aa18841f53591c2df67d9359b61593db3407e668c1bc99827c18dbc3500a572aedfbc30e234aad1e3a9593dae4fa72eb55e2deec2bc24538d18420888", 0xad}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000) 12:18:45 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @random, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x18, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) 12:18:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305839, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) [ 76.961232] audit: type=1400 audit(1679919525.436:6): avc: denied { execmem } for pid=261 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:18:45 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000800)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x24, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) 12:18:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2) [ 78.237225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.255848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.256877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.257853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.258706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.259271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.260908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.261959] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.262755] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.263741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.264291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.264911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.265445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.266280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.266788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.267610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.268315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.268853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.273265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.273873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.274066] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.274387] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.275773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.276294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.277418] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.278296] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.278899] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.279020] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.279482] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.280708] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.281216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.281635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.281888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.283260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.283835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.284121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.284408] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.285347] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.340689] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.343136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.345173] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.346387] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 78.357860] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.357924] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 78.359420] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.361385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.396233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.403891] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.349191] Bluetooth: hci1: command 0x0409 tx timeout [ 80.350038] Bluetooth: hci0: command 0x0409 tx timeout [ 80.350482] Bluetooth: hci2: command 0x0409 tx timeout [ 80.350950] Bluetooth: hci4: command 0x0409 tx timeout [ 80.351386] Bluetooth: hci3: command 0x0409 tx timeout [ 80.412777] Bluetooth: hci6: command 0x0409 tx timeout [ 80.413305] Bluetooth: hci7: command 0x0409 tx timeout [ 80.477783] Bluetooth: hci5: command 0x0409 tx timeout [ 82.399393] Bluetooth: hci3: command 0x041b tx timeout [ 82.400053] Bluetooth: hci4: command 0x041b tx timeout [ 82.400400] Bluetooth: hci2: command 0x041b tx timeout [ 82.400757] Bluetooth: hci0: command 0x041b tx timeout [ 82.401111] Bluetooth: hci1: command 0x041b tx timeout [ 82.460718] Bluetooth: hci7: command 0x041b tx timeout [ 82.461103] Bluetooth: hci6: command 0x041b tx timeout [ 82.525742] Bluetooth: hci5: command 0x041b tx timeout [ 84.444803] Bluetooth: hci1: command 0x040f tx timeout [ 84.445287] Bluetooth: hci0: command 0x040f tx timeout [ 84.445695] Bluetooth: hci2: command 0x040f tx timeout [ 84.446086] Bluetooth: hci4: command 0x040f tx timeout [ 84.446469] Bluetooth: hci3: command 0x040f tx timeout [ 84.509696] Bluetooth: hci6: command 0x040f tx timeout [ 84.510146] Bluetooth: hci7: command 0x040f tx timeout [ 84.572716] Bluetooth: hci5: command 0x040f tx timeout [ 86.492767] Bluetooth: hci3: command 0x0419 tx timeout [ 86.493192] Bluetooth: hci4: command 0x0419 tx timeout [ 86.493566] Bluetooth: hci2: command 0x0419 tx timeout [ 86.494338] Bluetooth: hci0: command 0x0419 tx timeout [ 86.494731] Bluetooth: hci1: command 0x0419 tx timeout [ 86.557697] Bluetooth: hci7: command 0x0419 tx timeout [ 86.558064] Bluetooth: hci6: command 0x0419 tx timeout [ 86.621733] Bluetooth: hci5: command 0x0419 tx timeout [ 118.766208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.766848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.768027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.943346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.943966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.945244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.433167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.434114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.435417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.607170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.608084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.664439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.682168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.682897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.684190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.788925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.789543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.791245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.807953] Bluetooth: hci0: Opcode 0x c03 failed: -4 [ 119.817785] Bluetooth: hci0: Opcode 0x c03 failed: -4 [ 120.123371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.124025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.125521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.212496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.213315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.215566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.560946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.561519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.562901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.582511] audit: type=1400 audit(1679919569.057:7): avc: denied { open } for pid=3833 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.583937] audit: type=1400 audit(1679919569.057:8): avc: denied { kernel } for pid=3833 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.650669] hrtimer: interrupt took 21691 ns [ 120.696981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.697600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.699470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.224181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.224956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.226567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.264225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.265219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.266441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.743491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.745073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.753818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.774974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.776113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.778448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.823049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.824264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.826832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.850749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.851906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.861482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:19:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x122, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:30 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)="e0686d0b2aef6464c4dc37c6199b288ab2dfe6ef550cfc0fc3987306eb232101aba03385fe12fcd9038a8ba74995d0ffbb58d7ec7b6905b489e1eec4c7e967eb004688126d7da59c68fd2e18a345970ca2ceed407b9126932519ec9606468fd2ce98bf859ce9f5fad9dd2a35dea6f6d02aa18841f53591c2df67d9359b61593db3407e668c1bc99827c18dbc3500a572aedfbc30e234aad1e3a9593dae4fa72eb55e2deec2bc24538d18420888", 0xad}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000) 12:19:31 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r1) 12:19:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0) 12:19:31 executing program 5: clone3(&(0x7f0000006100)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000006000)=""/162, 0x0}, 0x58) 12:19:31 executing program 0: r0 = io_uring_setup(0xea0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) dup3(r1, r0, 0x0) 12:19:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2) 12:19:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305839, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 12:19:31 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r1) [ 122.801173] Bluetooth: hci0: Opcode 0x c03 failed: -4 12:19:31 executing program 0: r0 = io_uring_setup(0xea0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) dup3(r1, r0, 0x0) [ 122.993114] Bluetooth: hci0: Opcode 0x c03 failed: -4 12:19:31 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r1) 12:19:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2) 12:19:31 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)="e0686d0b2aef6464c4dc37c6199b288ab2dfe6ef550cfc0fc3987306eb232101aba03385fe12fcd9038a8ba74995d0ffbb58d7ec7b6905b489e1eec4c7e967eb004688126d7da59c68fd2e18a345970ca2ceed407b9126932519ec9606468fd2ce98bf859ce9f5fad9dd2a35dea6f6d02aa18841f53591c2df67d9359b61593db3407e668c1bc99827c18dbc3500a572aedfbc30e234aad1e3a9593dae4fa72eb55e2deec2bc24538d18420888", 0xad}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000) 12:19:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x122, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305839, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 12:19:31 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)) 12:19:31 executing program 0: r0 = io_uring_setup(0xea0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) dup3(r1, r0, 0x0) 12:19:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x0, 0x0, 0x11, &(0x7f0000000080)="782e2095c341b84c6e0f0d8836f4e06599"}) 12:19:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2) 12:19:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x0, 0x0, 0x11, &(0x7f0000000080)="782e2095c341b84c6e0f0d8836f4e06599"}) [ 123.142971] Bluetooth: hci0: Opcode 0x c03 failed: -4 12:19:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305839, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 12:19:31 executing program 6: futex(&(0x7f0000000100), 0x5, 0x0, 0x0, &(0x7f0000000180), 0x3000000) 12:19:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x0, 0x0, 0x11, &(0x7f0000000080)="782e2095c341b84c6e0f0d8836f4e06599"}) 12:19:31 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40501, 0x0) write(r0, &(0x7f0000000140)='I', 0x1) 12:19:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x0, 0x0, 0x11, &(0x7f0000000080)="782e2095c341b84c6e0f0d8836f4e06599"}) 12:19:31 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="2c0000001000f9ffff7f0000000000000c00000002"], 0x2c}], 0x1}, 0x0) 12:19:31 executing program 0: r0 = epoll_create(0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000002}) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x60000017}) r3 = fork() r4 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000040)={r0, r2, 0xdcea}) 12:19:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) [ 123.325405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. [ 123.354195] audit: type=1400 audit(1679919571.829:9): avc: denied { block_suspend } for pid=3998 comm="syz-executor.0" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 12:19:32 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40501, 0x0) write(r0, &(0x7f0000000140)='I', 0x1) 12:19:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xfffffffb}) perf_event_open(0x0, r1, 0xf, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='{.,-^\x00', &(0x7f0000000040)='\x00', 0x0) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 12:19:32 executing program 4: openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x10d882, 0x0) 12:19:32 executing program 0: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgroups(0x0, 0x0) timerfd_create(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 12:19:32 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)="e0686d0b2aef6464c4dc37c6199b288ab2dfe6ef550cfc0fc3987306eb232101aba03385fe12fcd9038a8ba74995d0ffbb58d7ec7b6905b489e1eec4c7e967eb004688126d7da59c68fd2e18a345970ca2ceed407b9126932519ec9606468fd2ce98bf859ce9f5fad9dd2a35dea6f6d02aa18841f53591c2df67d9359b61593db3407e668c1bc99827c18dbc3500a572aedfbc30e234aad1e3a9593dae4fa72eb55e2deec2bc24538d18420888", 0xad}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000) 12:19:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x122, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:32 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000003c0)) 12:19:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 12:19:32 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40501, 0x0) write(r0, &(0x7f0000000140)='I', 0x1) 12:19:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 12:19:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"}) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000001c0)=0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) 12:19:32 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:19:32 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40501, 0x0) write(r0, &(0x7f0000000140)='I', 0x1) 12:19:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 12:19:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$setlease(r2, 0x400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) preadv(r3, &(0x7f0000000240), 0x0, 0x1, 0x4) flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) 12:19:33 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:19:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00', 0x11}, &(0x7f0000000080)=0x1e) 12:19:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 12:19:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 12:19:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xfffffffb}) perf_event_open(0x0, r1, 0xf, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='{.,-^\x00', &(0x7f0000000040)='\x00', 0x0) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$setlease(r2, 0x400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) preadv(r3, &(0x7f0000000240), 0x0, 0x1, 0x4) flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) 12:19:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:19:33 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:19:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 12:19:33 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) [ 124.737255] syz-executor.6 (4073) used greatest stack depth: 23944 bytes left 12:19:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$setlease(r2, 0x400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) preadv(r3, &(0x7f0000000240), 0x0, 0x1, 0x4) flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) 12:19:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:19:33 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:19:33 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:19:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xfffffffb}) perf_event_open(0x0, r1, 0xf, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='{.,-^\x00', &(0x7f0000000040)='\x00', 0x0) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:33 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/pm_freeze_timeout', 0x0, 0x0) 12:19:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:19:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$setlease(r2, 0x400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) preadv(r3, &(0x7f0000000240), 0x0, 0x1, 0x4) flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) 12:19:33 executing program 5: mknod$loop(&(0x7f0000000180)='./file1\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xb203, 0x0) 12:19:33 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0xc4841, 0x0) fadvise64(r0, 0x0, 0x7, 0x4) 12:19:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 12:19:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) 12:19:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x20000}) 12:19:33 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:19:33 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000280)={"55a353f11120c616992dd7f6", &(0x7f00000001c0)="b0", 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:19:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xfffffffb}) perf_event_open(0x0, r1, 0xf, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='{.,-^\x00', &(0x7f0000000040)='\x00', 0x0) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{0x11}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x2, @device_b}]}, 0x2c}}, 0x0) 12:19:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) 12:19:33 executing program 5: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x810036, &(0x7f0000000080)={[{@commit}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x40000000000000, 0x0, 0x2}, &(0x7f0000000240)=[{}, {}]) [ 125.403834] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. [ 125.413167] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. 12:19:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x5385, &(0x7f0000000000)) 12:19:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 12:19:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000008f40)={0x2, &(0x7f0000008f00)=[{0x15, 0x0, 0x0, 0x1d9a}, {0x6}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:19:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) 12:19:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 12:19:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0x40086607, &(0x7f00000002c0)) [ 125.688581] audit: type=1326 audit(1679919574.162:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4144 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9de2b03b19 code=0x0 12:19:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 12:19:34 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="044800018040c80008004b05c80003006a08c8000600ff03c9000800f600c9000600aee7"], 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_WRITE_DEF_DATA_LEN={{}, 0x40}}}, 0x7) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a033, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r2) vmsplice(r2, &(0x7f0000001380)=[{&(0x7f00000001c0)="22340a3cd89675ff5aee3e1dd6bb54186d011675eeb07273409836252277033f42608f3d16c2f1988a84285ee6c0aec7617eb579e526956589bc6ca43c0cfa31e8ddcca7d5652973d6003b30b33848ce6ccf896c1cab9c68586cca0398f4a299e137e849fa4c07aa27e5d46e3e2f294e86ca23a7fd9bed76beb94691d452a60993923e72c0201202b1cb824f1b3956dea3030704897ac9aa74be6c3e66779b500226cf1745fe3c96f19d92110f8f1c259b5460d81dc962876c5059d1d76eddf9da7b13ab637f2d3db134c3fc64a8206d7db4ff295a021727fb02b1be850e9e9ab087c557738e8ba8fd69adbe1c80f4c824a631811ac3eba748f27522130c4d213be2d55de71cd953c77bc4fa25b3e662fc629fa0c0f37d6bf52b86364d8b316740cb2d884e3eca6a32a3f1890a8a343a3a46ba2def0935b385bb8683d8fbde41bb0915d514a01ebcce461457e1ba4644619f1a07d6fc94d118ca7019dc2c56b1f9cad5e9ef08d493241e6fa95e8519dd70e5757b85949e29786e17027d944ba2b03015723747be51501a5b724e7bc909d7a5f1be41e82f7105b661ccc0331fa21782210652570222452a2f379c3fed924ffe7c4a7080107e3528e5d6b3367a0a43eeaa49064e2417c75659b1459b314805dc4fd1e7381131605ee2ef4d73d460155dc58513587842aa1eadb6282b3f91816a3638198e80d1718333b13fb71f675a4fee2845172e71ad9f9b310785cd24672eddcbe7406a2f9fabbe2c23d4cd382f16afc53503c46c16e63a3ecc9cb247383d275e593c5b214e07bfde7262f0b9ba25772037423c293a7ba8dc21931c0763976b333b9d6bb1c42e17d697353669796bdcf29e4bfceebf57e846d53044c4b30f40c499627c152b5a43922161c55c3eff228b3d762d28ada1ccfec22c5cad2066a9fa99ccac480ebcbe987e49adb1e7a34cc7236a5b057140e6140408018b71a0ef3db2efc05a8e102dc72b3fd9cfca38477796772a38640a962305dc8500d46696a7e5f3c4e3d10ee82d04eca4c5da444e10f1fa3ac3fde2adfd29a45178631d624e00dd03ec01175d132dc37b41b850827b375625726f049443405bdcbbbbba280bf2a89e9ac1067072a0e47fa8a07bd9414b157e1c6463a722d444424aec2e4009c84d2abf6ec8a4bf4d6a3662cffd949aede5e5598afbc5dc5e672a1460eca692e422e9841caf9dbbe96eb558ea39f5535014f0332d89283c8a7d9833cc190b9ce61bb7f119468e35d20698848fe0988f0264ccaeb91de44e1c559cffa2f92d11947329b2e43424a5f9a16d17b6363cbe9bb8887a8e2214a052c58d0e5101ab22c3b73c74d0e259c3405abafb56478ade468782e579feb98c4d451c49b43fb4cc0c34a0a3a67c0c13b8517e3530ead9cdefa34514fd2c8036a8cdf67b6acc0290f8216b40795eaf6d31484769fa8523b5a602ff4817304ef9531a55cb40359af2fb48d55a9a55db4879ba6620aa65032e5916c066f01ab8b60dd22d8584f04cc07a5c46df7a4753f596a8a458a8b2b453614190d4de1c7ecdea8cfbb7cc0536ae296db757dcbead05937ecf84634e14eca912939624b7e1a541b7931c86c705dc94ba4490deebb54c1157b5c8497bde419faa87ced854845ad1844ed1c2b63ef2cb5e851ab679fb56b00c0f56251a1a6454d19d642e8c11453816a9d0af2169775c07694da9a6f9abd5882e07792df4496ec0a6fccbb8292ef4841f6d0b960c2340c29dae3fbc90dbed12a15a49d6cbf2433a5d4e44727acf3f14fe9f9cdae472999bec53d1bbc4ff80557fdd1fb69325fa5426dc806072b37633d4b90ae9c2d6a4675d8e5944f87a382ce9200387ac3169268039643078e124febb3b87400de9211df99174d948bca2b29708c9d3003dbbb51f44c227457c99e72108750a01b431642e92ec3b30ab9066cdb4084e806d044ee0265c7101ee6070398b3f8b59069548ad559d95298189c05f3398600950f112d6a8f4860e8a9053a2a2f78a85a78fca69f6967c13d2c408e61dcf57512bd7b0b710167b555abeda216f43cbacfe873e55b913cc48fab3ed6f9409a475b98c4c3a97d7d1e383296ebbfb2085c9da6426b1c04259edfb358c09ae4da3250f870d7156cb240aad318a12445477e85f656ded428269187471ad2cb4d5d898802a22167b75e65c16c40d64d0dfcad957dd36c8f6bfda23b30e302e2a0094c8095e274cd68c12d045bf55769d5fb854b8650aca26b670443132a334eb25600dfd8d6732f6bef410f18a992d01d4cb63f95f26f599a2719576c4e0511b8d98bfa7b731ad45c23b3583c6e6320ee9a3407cb5d9a97a7c37b97ba9c791e3f142bab21d55ae9e70564c3753b745e424e42184ad38f250ef477ba43335ab4a54acdee7e8209e48131549fe5ec0bfb32305057a998e0894cec380e9d88e5f84bd57b855101bd47a71f47189b1470af55c0f810973d0dd19838c1ef4dadf370577ffc76985ecf48914c7b4bf7f835dcb658c95f06d0c2827cfc77bbaba40e0375e6edc3c3002d11bce93af508b1b7edcd63e4ff487946fc0216e91319ff315ddfdd3134717843394afe80817382d9e3ac00cb708ccfbd58c931deebe5861b0bf742aaa97f2c3580f99304084453042d0c509d3a79979ba04b282f3904709764db768f15e4e860375f915240ba999995b05506f640e15bf0689bbb56db0b006369595d4aaa335120dabf418de7a64021824ff2bdcd016e72277b912efe9ebc00eb82522dc39cd7cb47834c3158c543d205556600f4b16b28b8344c1da642c74c802a47209c879b56405d0b2e15a121a9e10165e4d9dbe71720f9a76fb49117aa255655f721c4a79d19f9117ae487c812e8ffca65633efe38b06289979c766a12c22b7b86da1251d3ea325223995dbaf23020a6c637a86bce5e7178e623efaaf88814bf7db41c12b469104f2bba05bef3562c7ae786ec94476ee9ce33ea441dcecdde61c3f163d51a1b09dca1f486aa504375c8a0f05df05db78b1a4b13172e518a85e8afec9b0f430ea0e99b89eabda561791bfcf95177dc24f1cc8333cd8c39af0cd59cd8b5bec4c19590175c3264d66eeea4e3ab46e5cc97ef0264b82ae4f277832fcb843030da51787aa9d8817ec94da1b1f81022e661e250eab88f6dd6fcab915fd1840f95b75c6b8c787c0963a5d6b432128e271f4319cbf4b5ba8ebf60be1cac97ba34c5ce1c85bd2cab28ff69f8677e90caa0e9b68181a364ae4f4c7d6da6ee38f76d137f7a05026f839871ac432273151fbaab9eb02240ffbc8f5606c7bbb5f7d7f4f002dda58a040a948ef0b9702556bac1edaaed3b0f8cc9ad76166352a3034656352583da25b63c2020c417873d7894c3e6521692b58855f29a103721399bb12d7fbd46e27022fccb04ebb56f85211923870159f7c4039acb388d72a2ad8d753c8ab2caa58340060da1284a7a7d626c861e77f6a081859d673e6c191988240fe0d7df5f9be746c7cc47f15314cd99532fd07c0270b17f1a6fe64a4fdcb7a6d0706a45f334a1a55218f39751a29790c2e0000e5307c267837c7ccd0f340edc45df57f9f26b59dc5bfab031a0b0da699918a6fd49adb4abcb5729eaec5a95323da26c2149ddb30c29e21151c2c3b7d2fa5295dbb3b612a8b24ae4f1c68a530facbb10ebfbbb406690ee2937183d909fd3bf0c210c85153ea5124eb4570f67472b625ef7a40ea5e41491c05f062db80632349ee5980d71b23ca632f2ff931e079af697c09478b65ee600f4ca40dde761342cebde2ebfd8a412a7b38cf074ed494d3be7f01199137e1949be9eb9ed9a247a0973e99c98e97d9413dc7f06bc3e7ec641a02971d352760c37b781d1e1ca7872003e8f6a79e70a6de61dd2873bb4aa346262df2cec1c4b59c81557b35bd9a0f8584c8f47cfc7d562de52a294274f604671b4d1a3f31f1e99f852ebaba417ba233babefe904c001f740fd27c4c07c6ea9d9f2f865b4578d2d3a20778cae42a56514045e822486326a00eeccf312a54be29019e237303e9eb225f0cba5f89cd136cbfe2ab7e070faf5504ed753c4c54ac4998d28a6b9a1b067948c472bc5a031e80528e07957634433610f2e05e466af7355a408faaa6d055aae42861572a82dc2369557f2d57862de3c07bc85f6c5cf66343fb973a8c3d348a1986cfd15dba80b2ae6d52b1125dd1b8f5011e15cf0d08aaf3ef7c3c24f159db4e7f3f63424d332bc93c6bc276ba8689647eea31b7d8b95f1bd7571ea9ce3c562d1d3321c6ccdddcb63bcc6e0ffa706825587fa60e94edd830b0734db1fdde314069d1d1199abf654e9bb822578bc75d8547bf533c8279afb0afb8bd05b97ce4f42404c8269df8e7a55f579273361fd1384605444452325cf69f78323c9d84b6da8307f8ab3682bf2ae7ce9f9a7b21b3ef2f00fb4d4e2b08ec5f09601ccdcf5a591ff882e2e6e637b96c6d66b657d17917f7891b0f7edd4543662be3c539d3644b2d1f1bdc75102092157cf1d532f404f901910688254e8d3228103433c194107731ffa1696a97e62553c4e88e768f59755ef7c546cf70a6a228ad3c1054a7edbee664f996323051984c70545748bcbc0b7e787044bbfc9da7d384f728641a95d6088cc9a8cb1a871cfec354a9ebf8b88efc2582f55b9f9b5bb8555da6f08e0b5211f7584955358516ca7901e48a3e1bf831d495b806ffd968e6b8ed4ab74e43d5a365dcfac4a27c98a756562dab97dec11d98c013c9e31e15972d195628d3a026b47bc2de54d7b724eb1c75b093cb6ae003c67beeb09e9d0d44260091841aa6e1aae94176ef82e5c7eaef56603b42de2dd56c0048cd84856740c8b2de882b738090c16d4665d01d8a2b887446ebd9e2501a5f4a709b9f12bfb6897fdac0545411b4601ad49b910e70dda71843e21699fdec6d4cf616b42fb8b0be5f0495f0d81ee71b52c9654fc234aabd2371538ab7e09f45aa648e678b9228f71724adf2a0e56dd5a2f320df65f22700db7d5548db119e68f9259e2e5d83b3394f92dd75113f5ece823c750e4e08ad6a68bb77a9840d7027c76651ff287493069ef33e668d9b389517e2ec31c816d4a92fa7d041b3c2c0d51cb4b423be54efc600246a02c4fbf53e5f8df0a59a5ae2053d13c691f9f9a65b8a57cc2c08679838cd728ec40cd3b2d5e016ad15ed38c5677d8b58e2a0eda1fd25c4ef9f32957fa8f40fdd203603329e939e40b429e4bfd23be9fe5a63ba86d406c078c2c6bd035ec412cba1b46557130a81f25ac9f98e5524fbfc73438311afae69ffa47d6d793dc3e5133d6fb9f66e5033dc4d6d9c251774b6d50e08cfa7032bd0a6aa9329608d835d45b8d6e500bb212075affaa10e19cc4919b1eba176735dc842ad118e035b349d1265bf0d1140d163bd8454b0489cc7c62237ea7037231552ad1cb076b6ea7bbc6265676a716abdf996a29875e5e75ee6affb710c13a9d9d3df8ad99c9acbd194c26617bc4e897de7cf3c3fbc17446fec1d2291c1217733bb2d8b0052af40ac2da2d2e40af1ffa4df8d5143d2e19a1d57b1aabd3da8478ee615877ed3f1b3b134da9cb744527df7e9666b38daecd5d5a0a7bbe2539cf2b15c825ec9c012d82964bd9f81183649b35a9730e7b1d9780e57de3582b72cd301ba1f90680e1f8ee6a816a255ed6c52259debe46b685dd09eff27f26a4525f7b61db762b5ae64d7f6fde1498f9990154a90a0c434bfb1d4d46f362709f1444a2bbcbf876eb02a8ef48d9d6dc2a0029147f959501def351b9f17b3ab63ac7a5d", 0x1000}, {&(0x7f0000000140)}, {&(0x7f00000011c0)="6fa7a05cb7", 0x5}, {&(0x7f0000001200)="8c89ec7aa270505a34da5ccf461a4606af1cce4c612234c06cfc0c0bd950e0dee1b69dfab2457c009c764827dc9d78b62447af1b162cc0f3f566d74d612f61ef90a3b4a9c97b94aebc17fb23d627df5431b865f6dfb6c6d6d9808e5bbe3f45f6d3c02a7b17de9e527c215a82768d5e781a6f32ab0d25bf28a0ecfa40a36bb7d791fc7fa1021cb9acc650ecf0f6b6982773c0a08087a0987feaa6eb9d1cea09348d0ceaafd00cc92d759c1a3f8ab790f6ea9216143d1e79eb1052df7b1f5ef59ce3b896f7d2e04774809fc1f4574504156d97", 0xd2}, {&(0x7f0000001300)="6781381d76e7a011eb8d60044fcc1d178980fc064e89f000e1f0d34fb0fb479dd7be972df801b25423645a1acb9014358589621ce45d766bbfc9fcd6b75a93253599b0e8b837a1871c0047c1d13c43fb5bc343", 0x53}], 0x5, 0xe) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x1f}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 12:19:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bond_slave_0\x00'}) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x9, 0x1, 0x40, 0x80, 0x0, 0x1, 0xa0240, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000180), 0x7}, 0x200, 0x101, 0x101, 0x8, 0xc9, 0x4, 0x721, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) 12:19:34 executing program 3: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x7, 0x798, 0x2, 0x9a, 0x7, 0x2}) flock(0xffffffffffffffff, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000001c0)={{r2}, "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"}) r3 = fsopen(&(0x7f00000011c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001200)='/proc/mdstat\x00', 0x0, r2) accept$packet(r1, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001280)=0x14) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000012c0)=""/188, &(0x7f0000001380)=0xbc) r4 = openat2(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x22a80, 0x10, 0x5}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001540)=0xe8) 12:19:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4e, 0x0, &(0x7f00000001c0)) [ 126.519240] audit: type=1326 audit(1679919574.994:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4144 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9de2b03b19 code=0x0 12:19:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000008f40)={0x2, &(0x7f0000008f00)=[{0x15, 0x0, 0x0, 0x1d9a}, {0x6}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 126.942089] Bluetooth: hci7: unexpected event 0x48 length: 29 > 3 [ 126.942136] Bluetooth: hci7: Malformed Event: 0x48 12:19:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) 12:19:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 12:19:35 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000008f40)={0x2, &(0x7f0000008f00)=[{0x15, 0x0, 0x0, 0x1d9a}, {0x6}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 126.993799] Bluetooth: hci7: unexpected event 0x48 length: 29 > 3 [ 126.993844] Bluetooth: hci7: Malformed Event: 0x48 [ 126.997750] Bluetooth: hci7: ACL packet for unknown connection handle 0 12:19:35 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000018c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 12:19:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0x40086607, &(0x7f00000002c0)) [ 127.033382] audit: type=1326 audit(1679919575.508:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4166 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9de2b03b19 code=0x0 12:19:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0x40086607, &(0x7f00000002c0)) [ 127.171268] audit: type=1326 audit(1679919575.646:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4173 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfd14f4b19 code=0x0 12:19:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bond_slave_0\x00'}) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x9, 0x1, 0x40, 0x80, 0x0, 0x1, 0xa0240, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000180), 0x7}, 0x200, 0x101, 0x101, 0x8, 0xc9, 0x4, 0x721, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) 12:19:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 12:19:36 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000018c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 12:19:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0x40086607, &(0x7f00000002c0)) 12:19:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ftruncate(r1, 0x7) 12:19:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0x40086607, &(0x7f00000002c0)) 12:19:36 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000140)="693bc6303e4a5219378569e57a99e43c84e59631d219cb5b2821c230cf8af64228cc4f80433893b1ca87b79eec90a2c07e49a70b43705bd439d57a7763635fed049a1dcf73e0622aee56243f0eb6c239ad946638e1b7ac47e78a2baa9885db7c88eff70179e1863c38cfb2573f43d7f01dfd6d1d19f84b1089970da4ca8e5aa83d62c8039acf275a", 0x88) 12:19:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bond_slave_0\x00'}) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x9, 0x1, 0x40, 0x80, 0x0, 0x1, 0xa0240, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000180), 0x7}, 0x200, 0x101, 0x101, 0x8, 0xc9, 0x4, 0x721, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) 12:19:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000008f40)={0x2, &(0x7f0000008f00)=[{0x15, 0x0, 0x0, 0x1d9a}, {0x6}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:19:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000008f40)={0x2, &(0x7f0000008f00)=[{0x15, 0x0, 0x0, 0x1d9a}, {0x6}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 128.069027] audit: type=1326 audit(1679919576.544:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4189 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9de2b03b19 code=0x0 [ 128.126280] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4201 'syz-executor.2' [ 128.145169] loop2: detected capacity change from 0 to 40 12:19:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:36 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000018c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 12:19:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0x40086607, &(0x7f00000002c0)) [ 128.307018] audit: type=1326 audit(1679919576.782:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4204 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfd14f4b19 code=0x0 12:19:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bond_slave_0\x00'}) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x9, 0x1, 0x40, 0x80, 0x0, 0x1, 0xa0240, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000180), 0x7}, 0x200, 0x101, 0x101, 0x8, 0xc9, 0x4, 0x721, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) 12:19:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0x40086607, &(0x7f00000002c0)) 12:19:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ftruncate(r1, 0x7) 12:19:36 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000018c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 12:19:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ftruncate(r1, 0x7) [ 128.586442] loop2: detected capacity change from 0 to 40 [ 128.766540] loop1: detected capacity change from 0 to 40 12:19:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e000101000000000000000014000080040000000022f4c4c8"], 0x24}], 0x1}, 0x0) 12:19:37 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x543003, 0x10) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, @lba}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000200)=0x2) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000340)={0x1, 0x4, 0x8, 0xc, 0x18, 0x6}) 12:19:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000008f40)={0x2, &(0x7f0000008f00)=[{0x15, 0x0, 0x0, 0x1d9a}, {0x6}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:19:37 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000040), 0x20) 12:19:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@ip_tos_int={{0xfffffffffffffdf2}}], 0x18}}], 0x2, 0x0) [ 129.203141] audit: type=1326 audit(1679919577.678:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4238 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9de2b03b19 code=0x0 12:19:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ftruncate(r1, 0x7) 12:19:38 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000008f40)={0x2, &(0x7f0000008f00)=[{0x15, 0x0, 0x0, 0x1d9a}, {0x6}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:19:38 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x543003, 0x10) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, @lba}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000200)=0x2) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000340)={0x1, 0x4, 0x8, 0xc, 0x18, 0x6}) 12:19:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ftruncate(r1, 0x7) 12:19:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) 12:19:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@ip_tos_int={{0xfffffffffffffdf2}}], 0x18}}], 0x2, 0x0) 12:19:38 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0xaa, 0x4, 0x5, 0x81, 0x0, 0x20, 0xa620, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0xc104c70d77f15d40, 0x1, 0x6, 0x0, 0x40, 0xc0000000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0x4) r2 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) r4 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x2402c2, 0x1c0) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r5 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d706f6c1e7072656665723a302c666f736e65723d", @ANYRESDEC=0xee01, @ANYBLOB='\x00\x00']) mknodat$loop(r5, &(0x7f0000000240)='./file0\x00', 0x4, 0x1) symlinkat(&(0x7f00000002c0)='./file0\x00', r5, &(0x7f0000000300)='./file0\x00') ptrace$peek(0x2, 0x0, &(0x7f0000000480)) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) 12:19:38 executing program 6: getcwd(&(0x7f0000000640)=""/170, 0xaa) [ 130.123221] loop2: detected capacity change from 0 to 40 [ 130.124335] loop1: detected capacity change from 0 to 40 [ 130.133152] audit: type=1326 audit(1679919578.608:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4249 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfd14f4b19 code=0x0 12:19:38 executing program 3: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000140)=""/202, 0xca) 12:19:38 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) 12:19:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@ip_tos_int={{0xfffffffffffffdf2}}], 0x18}}], 0x2, 0x0) [ 130.323537] general protection fault, probably for non-canonical address 0xdffffc0004000640: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 130.324404] KASAN: probably user-memory-access in range [0x0000000020003200-0x0000000020003207] [ 130.325174] CPU: 0 PID: 4263 Comm: syz-executor.5 Not tainted 6.3.0-rc3-next-20230327 #1 [ 130.325816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.326448] RIP: 0010:do_iter_read+0x481/0x750 [ 130.328914] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 130.331521] RSP: 0018:ffff888041b87c78 EFLAGS: 00010212 [ 130.331947] RAX: 0000000020003200 RBX: ffff888041b87d60 RCX: ffffc90002bd9000 [ 130.332479] RDX: 0000000004000640 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 130.333016] RBP: 0000000000001003 R08: 0000000000000007 R09: 0000000000000000 [ 130.333553] R10: 0000000000001003 R11: 0000000000000001 R12: ffff88800e603b80 [ 130.334083] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491c9e0 [ 130.334629] FS: 00007f9de0058700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 130.335224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.335708] CR2: 0000001b2c12e000 CR3: 000000000fc66000 CR4: 0000000000350ef0 [ 130.336367] Call Trace: [ 130.336610] [ 130.336831] ? import_iovec+0x87/0xb0 [ 130.337197] vfs_readv+0xe5/0x160 [ 130.337543] ? __pfx_vfs_readv+0x10/0x10 [ 130.337925] ? __fget_files+0x24e/0x480 [ 130.338296] ? lock_release+0x1e3/0x680 [ 130.338707] ? __fget_files+0x270/0x480 [ 130.339085] __x64_sys_preadv+0x233/0x310 [ 130.339484] ? __pfx___x64_sys_preadv+0x10/0x10 [ 130.339940] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 130.340444] do_syscall_64+0x3f/0x90 [ 130.340807] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 130.341288] RIP: 0033:0x7f9de2b03b19 [ 130.341636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.343283] RSP: 002b:00007f9de0058188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 130.343890] RAX: ffffffffffffffda RBX: 00007f9de2c17020 RCX: 00007f9de2b03b19 [ 130.344414] RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000005 [ 130.344940] RBP: 00007f9de2b5df6d R08: 0000000000000000 R09: 0000000000000000 [ 130.345464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.345988] R13: 00007ffc729f852f R14: 00007f9de0058300 R15: 0000000000022000 [ 130.346521] [ 130.346708] Modules linked in: [ 130.347048] ---[ end trace 0000000000000000 ]--- [ 130.347555] RIP: 0010:do_iter_read+0x481/0x750 [ 130.348042] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 130.349391] RSP: 0018:ffff888041b87c78 EFLAGS: 00010212 [ 130.349805] RAX: 0000000020003200 RBX: ffff888041b87d60 RCX: ffffc90002bd9000 [ 130.350334] RDX: 0000000004000640 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 130.351002] RBP: 0000000000001003 R08: 0000000000000007 R09: 0000000000000000 [ 130.351535] R10: 0000000000001003 R11: 0000000000000001 R12: ffff88800e603b80 [ 130.352076] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491c9e0 [ 130.352614] FS: 00007f9de0058700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 130.353302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.353856] CR2: 0000001b2c12e000 CR3: 000000000fc66000 CR4: 0000000000350ef0 12:19:38 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x543003, 0x10) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, @lba}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000200)=0x2) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000340)={0x1, 0x4, 0x8, 0xc, 0x18, 0x6}) [ 130.386630] tmpfs: Unknown parameter 'mpolprefer:0' 12:19:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@ip_tos_int={{0xfffffffffffffdf2}}], 0x18}}], 0x2, 0x0) 12:19:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ftruncate(r1, 0x7) 12:19:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ftruncate(r1, 0x7) 12:19:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)={0x1c, 0x30, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) 12:19:39 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) [ 130.600911] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.616817] loop2: detected capacity change from 0 to 40 [ 130.644124] loop1: detected capacity change from 0 to 40 [ 130.972683] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 130.973456] Bluetooth: hci7: Injecting HCI hardware error event [ 130.974093] Bluetooth: hci7: hardware error 0x00 12:19:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0x4004662b, &(0x7f00000002c0)={0x0, 0x700000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="05000000000000000000000000000000fdffffff000000000000000002000000000000000000000000000000000000009a8aa234141954f866bde9b3beda24d6340ef3d67e92259a6297a5cf2bf4a90c605c4ce642f734d07400"/99]}) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x75, 0x4, 0x1, 0x0, 0x5, 0x42096, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7d5, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x8, 0x434, 0x5, 0x8, 0x401, 0x1000, 0x7ff, 0x0, 0x5, 0x0, 0x3}, r3, 0x10, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xf7, 0x6, 0x4, 0xe4, 0x0, 0x5, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x200, 0x800, 0x7, 0x9, 0x5, 0x7b, 0x7f, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x1, r3, 0x9) 12:19:39 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x543003, 0x10) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, @lba}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000200)=0x2) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000340)={0x1, 0x4, 0x8, 0xc, 0x18, 0x6}) 12:19:39 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x0, 0x9}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 12:19:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x40) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') symlinkat(&(0x7f0000000200)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) io_cancel(0x0, 0x0, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6}, 0x0, @in=@dev}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 12:19:39 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x0) [ 131.012611] general protection fault, probably for non-canonical address 0xdffffc0004000640: 0000 [#2] PREEMPT SMP KASAN NOPTI [ 131.013617] KASAN: probably user-memory-access in range [0x0000000020003200-0x0000000020003207] [ 131.014339] CPU: 0 PID: 4294 Comm: syz-executor.5 Tainted: G D 6.3.0-rc3-next-20230327 #1 [ 131.015630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.016825] RIP: 0010:do_iter_read+0x481/0x750 [ 131.017517] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 131.020149] RSP: 0018:ffff88804354fc78 EFLAGS: 00010212 [ 131.020923] RAX: 0000000020003200 RBX: ffff88804354fd60 RCX: ffffc900037df000 [ 131.021958] RDX: 0000000004000640 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 131.023012] RBP: 0000000000001003 R08: 0000000000000007 R09: 0000000000000000 [ 131.024114] R10: 0000000000001003 R11: 0000000000000001 R12: ffff8880415e8f00 [ 131.025253] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491c9e0 [ 131.026402] FS: 00007f9de0016700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 131.027647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.028521] CR2: 00007f9de0036ff8 CR3: 000000000fc66000 CR4: 0000000000350ef0 [ 131.029595] Call Trace: [ 131.029992] [ 131.030322] ? import_iovec+0x87/0xb0 [ 131.030926] vfs_readv+0xe5/0x160 [ 131.031463] ? __pfx_vfs_readv+0x10/0x10 [ 131.032108] ? lock_release+0x4d8/0x680 [ 131.032769] ? __fget_files+0x270/0x480 [ 131.033376] __x64_sys_preadv+0x233/0x310 [ 131.034002] ? __pfx___x64_sys_preadv+0x10/0x10 [ 131.034753] do_syscall_64+0x3f/0x90 [ 131.035322] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 131.036121] RIP: 0033:0x7f9de2b03b19 [ 131.036687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.039295] RSP: 002b:00007f9de0016188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 131.040409] RAX: ffffffffffffffda RBX: 00007f9de2c171a0 RCX: 00007f9de2b03b19 [ 131.041443] RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000005 [ 131.042468] RBP: 00007f9de2b5df6d R08: 0000000000000000 R09: 0000000000000000 [ 131.043539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.044611] R13: 00007ffc729f852f R14: 00007f9de0016300 R15: 0000000000022000 [ 131.045644] [ 131.045996] Modules linked in: [ 131.046888] ---[ end trace 0000000000000000 ]--- [ 131.047948] RIP: 0010:do_iter_read+0x481/0x750 [ 131.048989] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 131.052378] RSP: 0018:ffff888041b87c78 EFLAGS: 00010212 [ 131.053624] RAX: 0000000020003200 RBX: ffff888041b87d60 RCX: ffffc90002bd9000 [ 131.055058] RDX: 0000000004000640 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 131.056208] RBP: 0000000000001003 R08: 0000000000000007 R09: 0000000000000000 [ 131.057292] R10: 0000000000001003 R11: 0000000000000001 R12: ffff88800e603b80 [ 131.058291] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491c9e0 [ 131.059281] FS: 00007f9de0016700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 131.060402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.061243] CR2: 00007f9de0036ff8 CR3: 000000000fc66000 CR4: 0000000000350ef0 [ 131.085189] loop1: detected capacity change from 0 to 40 [ 131.121783] tmpfs: Unknown parameter 'mpolprefer:0' [ 131.200887] syz-executor.1: attempt to access beyond end of device [ 131.200887] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 131.202037] Buffer I/O error on dev loop1, logical block 10, lost async page write 12:19:40 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0xaa, 0x4, 0x5, 0x81, 0x0, 0x20, 0xa620, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0xc104c70d77f15d40, 0x1, 0x6, 0x0, 0x40, 0xc0000000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0x4) r2 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) r4 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x2402c2, 0x1c0) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r5 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d706f6c1e7072656665723a302c666f736e65723d", @ANYRESDEC=0xee01, @ANYBLOB='\x00\x00']) mknodat$loop(r5, &(0x7f0000000240)='./file0\x00', 0x4, 0x1) symlinkat(&(0x7f00000002c0)='./file0\x00', r5, &(0x7f0000000300)='./file0\x00') ptrace$peek(0x2, 0x0, &(0x7f0000000480)) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) 12:19:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x40) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') symlinkat(&(0x7f0000000200)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) io_cancel(0x0, 0x0, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6}, 0x0, @in=@dev}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 12:19:40 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x0, 0x9}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 12:19:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6b5ab4131e56e1f2}], {0x4, 0x4}, [{0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x1, 0xee01}], {0x10, 0x3}, {0x20, 0x1}}, 0x44, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$CDROMSEEK(r1, 0x5316, &(0x7f0000000140)={0xfd, 0x6, 0x1, 0x81, 0x0, 0x31}) 12:19:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x613, 0x0, 0x0, {{{@in=@empty, @in=@empty}, {@in=@empty, 0x0, 0x32}}, 0x0, 0xfffffffc}}, 0xf8}}, 0x0) 12:19:40 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x0, 0x9}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 12:19:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f00000010c0)=""/91, 0x5b, 0x0) 12:19:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, 0x0) [ 131.936334] loop1: detected capacity change from 0 to 40 [ 131.949726] loop3: detected capacity change from 0 to 40 12:19:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f00000010c0)=""/91, 0x5b, 0x0) 12:19:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x613, 0x0, 0x0, {{{@in=@empty, @in=@empty}, {@in=@empty, 0x0, 0x32}}, 0x0, 0xfffffffc}}, 0xf8}}, 0x0) [ 132.137888] general protection fault, probably for non-canonical address 0xdffffc0004000640: 0000 [#3] PREEMPT SMP KASAN NOPTI [ 132.139366] KASAN: probably user-memory-access in range [0x0000000020003200-0x0000000020003207] [ 132.140389] CPU: 1 PID: 4325 Comm: syz-executor.5 Tainted: G D 6.3.0-rc3-next-20230327 #1 [ 132.141516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 132.142485] RIP: 0010:do_iter_read+0x481/0x750 [ 132.143082] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 132.145214] RSP: 0018:ffff888043917c78 EFLAGS: 00010212 [ 132.145867] RAX: 0000000020003200 RBX: ffff888043917d60 RCX: ffffc90002bd9000 [ 132.146765] RDX: 0000000004000640 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 132.147612] RBP: 0000000000001003 R08: 0000000000000007 R09: 0000000000000000 [ 132.148468] R10: 0000000000001003 R11: 0000000000000001 R12: ffff88800e332500 [ 132.149311] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491c9e0 [ 132.150171] FS: 00007f9de0058700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 132.151152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.151854] CR2: 0000001b2c833000 CR3: 0000000041b6e000 CR4: 0000000000350ee0 [ 132.152703] Call Trace: [ 132.153020] [ 132.153307] ? import_iovec+0x87/0xb0 [ 132.153789] vfs_readv+0xe5/0x160 [ 132.154235] ? __pfx_vfs_readv+0x10/0x10 [ 132.154779] ? lock_release+0x4d8/0x680 [ 132.155287] ? finish_task_switch.isra.0+0x203/0x830 [ 132.155921] ? trace_hardirqs_on+0x16/0x100 [ 132.156454] ? do_futex+0x13a/0x380 [ 132.156931] ? __fget_files+0x270/0x480 [ 132.157429] __x64_sys_preadv+0x233/0x310 [ 132.157955] ? __pfx___x64_sys_preadv+0x10/0x10 [ 132.158544] do_syscall_64+0x3f/0x90 [ 132.159032] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 132.159665] RIP: 0033:0x7f9de2b03b19 [ 132.160118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.162249] RSP: 002b:00007f9de0058188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 132.163168] RAX: ffffffffffffffda RBX: 00007f9de2c17020 RCX: 00007f9de2b03b19 [ 132.164017] RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000005 [ 132.164864] RBP: 00007f9de2b5df6d R08: 0000000000000000 R09: 0000000000000000 [ 132.165708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.166552] R13: 00007ffc729f852f R14: 00007f9de0058300 R15: 0000000000022000 [ 132.167425] [ 132.167717] Modules linked in: [ 132.168305] ---[ end trace 0000000000000000 ]--- [ 132.168897] RIP: 0010:do_iter_read+0x481/0x750 [ 132.169474] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 132.171665] RSP: 0018:ffff888041b87c78 EFLAGS: 00010212 [ 132.172329] RAX: 0000000020003200 RBX: ffff888041b87d60 RCX: ffffc90002bd9000 [ 132.173207] RDX: 0000000004000640 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 132.174083] RBP: 0000000000001003 R08: 0000000000000007 R09: 0000000000000000 [ 132.174971] R10: 0000000000001003 R11: 0000000000000001 R12: ffff88800e603b80 [ 132.175834] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491c9e0 [ 132.176713] FS: 00007f9de0058700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 132.177686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.178384] CR2: 0000001b2c833000 CR3: 0000000041b6e000 CR4: 0000000000350ee0 [ 132.225833] tmpfs: Unknown parameter 'mpolprefer:0' 12:19:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x40) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') symlinkat(&(0x7f0000000200)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) io_cancel(0x0, 0x0, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6}, 0x0, @in=@dev}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 12:19:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f00000010c0)=""/91, 0x5b, 0x0) 12:19:41 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x0, 0x9}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 133.024431] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 133.285140] loop3: detected capacity change from 0 to 40 [ 133.511822] syz-executor.3: attempt to access beyond end of device [ 133.511822] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 133.513782] Buffer I/O error on dev loop3, logical block 10, lost async page write 12:19:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x613, 0x0, 0x0, {{{@in=@empty, @in=@empty}, {@in=@empty, 0x0, 0x32}}, 0x0, 0xfffffffc}}, 0xf8}}, 0x0) 12:19:42 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x0, 0x9}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 12:19:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f00000010c0)=""/91, 0x5b, 0x0) 12:19:42 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x1190c0, 0x0) mq_timedreceive(r2, &(0x7f0000000140)=""/167, 0xa7, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x0, 0x0) syz_io_uring_setup(0x2cfb, &(0x7f0000000480)={0x0, 0xe8e2, 0x2, 0x3, 0x100}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000580), 0x8000) 12:19:42 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0xaa, 0x4, 0x5, 0x81, 0x0, 0x20, 0xa620, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0xc104c70d77f15d40, 0x1, 0x6, 0x0, 0x40, 0xc0000000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0x4) r2 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) r4 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x2402c2, 0x1c0) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r5 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d706f6c1e7072656665723a302c666f736e65723d", @ANYRESDEC=0xee01, @ANYBLOB='\x00\x00']) mknodat$loop(r5, &(0x7f0000000240)='./file0\x00', 0x4, 0x1) symlinkat(&(0x7f00000002c0)='./file0\x00', r5, &(0x7f0000000300)='./file0\x00') ptrace$peek(0x2, 0x0, &(0x7f0000000480)) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) 12:19:42 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6b5ab4131e56e1f2}], {0x4, 0x4}, [{0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x1, 0xee01}], {0x10, 0x3}, {0x20, 0x1}}, 0x44, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$CDROMSEEK(r1, 0x5316, &(0x7f0000000140)={0xfd, 0x6, 0x1, 0x81, 0x0, 0x31}) 12:19:42 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x0, 0x9}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 12:19:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x40) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') symlinkat(&(0x7f0000000200)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) io_cancel(0x0, 0x0, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6}, 0x0, @in=@dev}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 133.621508] loop1: detected capacity change from 0 to 40 [ 133.974981] general protection fault, probably for non-canonical address 0xdffffc0004000640: 0000 [#4] PREEMPT SMP KASAN NOPTI [ 133.976416] KASAN: probably user-memory-access in range [0x0000000020003200-0x0000000020003207] [ 133.977502] CPU: 1 PID: 4366 Comm: syz-executor.5 Tainted: G D 6.3.0-rc3-next-20230327 #1 [ 133.978703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 133.979722] RIP: 0010:do_iter_read+0x481/0x750 [ 133.980330] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 133.982561] RSP: 0018:ffff88804464fc78 EFLAGS: 00010212 [ 133.983236] RAX: 0000000020003200 RBX: ffff88804464fd60 RCX: ffffc90002bd9000 [ 133.984198] RDX: 0000000004000640 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 133.985176] RBP: 0000000000001003 R08: 0000000000000007 R09: 0000000000000000 [ 133.986061] R10: 0000000000001003 R11: 0000000000000001 R12: ffff88800c663680 [ 133.986959] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491c9e0 [ 133.987847] FS: 00007f9de0058700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 133.988858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.989587] CR2: 00007fe6661903a4 CR3: 000000000da60000 CR4: 0000000000350ee0 [ 133.990505] Call Trace: [ 133.990867] [ 133.991167] ? import_iovec+0x87/0xb0 [ 133.991680] vfs_readv+0xe5/0x160 [ 133.992147] ? __pfx_vfs_readv+0x10/0x10 [ 133.992683] ? lock_release+0x4d8/0x680 [ 133.993216] ? kmem_cache_free+0xff/0x4a0 [ 133.993768] ? do_futex+0x13a/0x380 [ 133.994268] ? __fget_files+0x270/0x480 [ 133.994819] __x64_sys_preadv+0x233/0x310 [ 133.995383] ? __pfx___x64_sys_preadv+0x10/0x10 [ 133.996004] do_syscall_64+0x3f/0x90 [ 133.996499] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 133.997155] RIP: 0033:0x7f9de2b03b19 [ 133.997635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.999886] RSP: 002b:00007f9de0058188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 134.000833] RAX: ffffffffffffffda RBX: 00007f9de2c17020 RCX: 00007f9de2b03b19 [ 134.001717] RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000005 [ 134.002613] RBP: 00007f9de2b5df6d R08: 0000000000000000 R09: 0000000000000000 [ 134.003524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.004434] R13: 00007ffc729f852f R14: 00007f9de0058300 R15: 0000000000022000 [ 134.005335] [ 134.005644] Modules linked in: [ 134.006133] ---[ end trace 0000000000000000 ]--- [ 134.006775] RIP: 0010:do_iter_read+0x481/0x750 [ 134.007383] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 134.009639] RSP: 0018:ffff888041b87c78 EFLAGS: 00010212 [ 134.010306] RAX: 0000000020003200 RBX: ffff888041b87d60 RCX: ffffc90002bd9000 [ 134.011189] RDX: 0000000004000640 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 134.012064] RBP: 0000000000001003 R08: 0000000000000007 R09: 0000000000000000 [ 134.012936] R10: 0000000000001003 R11: 0000000000000001 R12: ffff88800e603b80 [ 134.013810] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491c9e0 [ 134.014701] FS: 00007f9de0058700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 134.015689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.016390] CR2: 00007fe6661903a4 CR3: 000000000da60000 CR4: 0000000000350ee0 [ 134.259490] tmpfs: Unknown parameter 'mpolprefer:0' 12:19:43 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6b5ab4131e56e1f2}], {0x4, 0x4}, [{0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x1, 0xee01}], {0x10, 0x3}, {0x20, 0x1}}, 0x44, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$CDROMSEEK(r1, 0x5316, &(0x7f0000000140)={0xfd, 0x6, 0x1, 0x81, 0x0, 0x31}) 12:19:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x613, 0x0, 0x0, {{{@in=@empty, @in=@empty}, {@in=@empty, 0x0, 0x32}}, 0x0, 0xfffffffc}}, 0xf8}}, 0x0) 12:19:43 executing program 0: r0 = memfd_create(&(0x7f0000000080)='/proc/diskstats\x00', 0x0) fremovexattr(r0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00') 12:19:43 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000380)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), 0x4) 12:19:43 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x0, 0x9}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 12:19:43 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0xaa, 0x4, 0x5, 0x81, 0x0, 0x20, 0xa620, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0xc104c70d77f15d40, 0x1, 0x6, 0x0, 0x40, 0xc0000000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0x4) r2 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) r4 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x2402c2, 0x1c0) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r5 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d706f6c1e7072656665723a302c666f736e65723d", @ANYRESDEC=0xee01, @ANYBLOB='\x00\x00']) mknodat$loop(r5, &(0x7f0000000240)='./file0\x00', 0x4, 0x1) symlinkat(&(0x7f00000002c0)='./file0\x00', r5, &(0x7f0000000300)='./file0\x00') ptrace$peek(0x2, 0x0, &(0x7f0000000480)) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) [ 135.250010] loop1: detected capacity change from 0 to 40 12:19:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x8004) write$binfmt_misc(r0, 0x0, 0x4) 12:19:43 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc001, 0x0, 0x0, 0x0) 12:19:43 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f0000000100)) 12:19:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) 12:19:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) [ 135.404373] general protection fault, probably for non-canonical address 0xdffffc0004000640: 0000 [#5] PREEMPT SMP KASAN NOPTI [ 135.405799] KASAN: probably user-memory-access in range [0x0000000020003200-0x0000000020003207] [ 135.406888] CPU: 0 PID: 4394 Comm: syz-executor.5 Tainted: G D 6.3.0-rc3-next-20230327 #1 [ 135.408096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 135.409102] RIP: 0010:do_iter_read+0x481/0x750 [ 135.409705] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 135.411964] RSP: 0018:ffff888043627c78 EFLAGS: 00010212 [ 135.412638] RAX: 0000000020003200 RBX: ffff888043627d60 RCX: ffffc90002bd9000 [ 135.413525] RDX: 0000000004000640 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 135.414410] RBP: 0000000000001003 R08: 0000000000000007 R09: 0000000000000000 [ 135.415307] R10: 0000000000001003 R11: 0000000000000001 R12: ffff88800ed58a00 [ 135.416200] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491c9e0 [ 135.417104] FS: 00007f9de0058700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 135.418118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.418881] CR2: 0000001b2c526000 CR3: 000000000fd80000 CR4: 0000000000350ef0 [ 135.419730] Call Trace: [ 135.420045] [ 135.420329] ? import_iovec+0x87/0xb0 [ 135.420804] vfs_readv+0xe5/0x160 [ 135.421242] ? __pfx_vfs_readv+0x10/0x10 [ 135.421762] ? lock_release+0x4d8/0x680 [ 135.422293] ? finish_task_switch.isra.0+0x203/0x830 [ 135.422956] ? trace_hardirqs_on+0x16/0x100 [ 135.423522] ? do_futex+0x13a/0x380 [ 135.424019] ? __fget_files+0x270/0x480 [ 135.424542] __x64_sys_preadv+0x233/0x310 [ 135.425094] ? __pfx___x64_sys_preadv+0x10/0x10 [ 135.425718] do_syscall_64+0x3f/0x90 [ 135.426207] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 135.426872] RIP: 0033:0x7f9de2b03b19 [ 135.427352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.429603] RSP: 002b:00007f9de0058188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 135.430562] RAX: ffffffffffffffda RBX: 00007f9de2c17020 RCX: 00007f9de2b03b19 [ 135.431467] RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000005 [ 135.432358] RBP: 00007f9de2b5df6d R08: 0000000000000000 R09: 0000000000000000 [ 135.433259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.434131] R13: 00007ffc729f852f R14: 00007f9de0058300 R15: 0000000000022000 [ 135.435028] [ 135.435332] Modules linked in: [ 135.435818] ---[ end trace 0000000000000000 ]--- [ 135.436423] RIP: 0010:do_iter_read+0x481/0x750 [ 135.437023] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 135.439266] RSP: 0018:ffff888041b87c78 EFLAGS: 00010212 [ 135.439976] RAX: 0000000020003200 RBX: ffff888041b87d60 RCX: ffffc90002bd9000 [ 135.440897] RDX: 0000000004000640 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 135.441820] RBP: 0000000000001003 R08: 0000000000000007 R09: 0000000000000000 [ 135.442733] R10: 0000000000001003 R11: 0000000000000001 R12: ffff88800e603b80 [ 135.443636] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491c9e0 [ 135.444534] FS: 00007f9de0058700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 135.445560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.446302] CR2: 0000001b2c526000 CR3: 000000000fd80000 CR4: 0000000000350ef0 [ 135.551818] tmpfs: Unknown parameter 'mpolprefer:0' 12:19:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6b5ab4131e56e1f2}], {0x4, 0x4}, [{0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x1, 0xee01}], {0x10, 0x3}, {0x20, 0x1}}, 0x44, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$CDROMSEEK(r1, 0x5316, &(0x7f0000000140)={0xfd, 0x6, 0x1, 0x81, 0x0, 0x31}) 12:19:44 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc001, 0x0, 0x0, 0x0) 12:19:44 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc001, 0x0, 0x0, 0x0) 12:19:44 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc001, 0x0, 0x0, 0x0) 12:19:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/netpoll', 0x0, 0x41) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/217, 0xd9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000027f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0}]) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r3, @ANYRES16=r0], 0x220) 12:19:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', 0x0, 0x25, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x8021, 0x0) 12:19:44 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000380)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), 0x4) 12:19:44 executing program 7: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000380)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), 0x4) 12:19:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) close(r0) 12:19:45 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc001, 0x0, 0x0, 0x0) 12:19:45 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc001, 0x0, 0x0, 0x0) 12:19:45 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc001, 0x0, 0x0, 0x0) 12:19:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/netpoll', 0x0, 0x41) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/217, 0xd9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000027f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0}]) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r3, @ANYRES16=r0], 0x220) 12:19:45 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000380)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), 0x4) 12:19:45 executing program 7: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000380)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), 0x4) 12:19:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/netpoll', 0x0, 0x41) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/217, 0xd9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000027f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0}]) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r3, @ANYRES16=r0], 0x220) 12:19:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/netpoll', 0x0, 0x41) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/217, 0xd9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000027f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0}]) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r3, @ANYRES16=r0], 0x220) 12:19:45 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc001, 0x0, 0x0, 0x0) 12:19:45 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc001, 0x0, 0x0, 0x0) 12:19:45 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc001, 0x0, 0x0, 0x0) 12:19:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/netpoll', 0x0, 0x41) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/217, 0xd9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000027f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0}]) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r3, @ANYRES16=r0], 0x220) 12:19:45 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000380)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), 0x4) 12:19:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/netpoll', 0x0, 0x41) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/217, 0xd9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000027f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0}]) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r3, @ANYRES16=r0], 0x220) 12:19:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/netpoll', 0x0, 0x41) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/217, 0xd9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000027f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0}]) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r3, @ANYRES16=r0], 0x220) 12:19:46 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x80, 0x2}, {0x1f}}}}, 0x2) 12:19:46 executing program 7: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000380)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), 0x4) 12:19:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f0000000000)={'wlan0\x00'}) 12:19:46 executing program 1: r0 = memfd_create(&(0x7f0000000040)='b\xf7\xf3\x80\x04\x989\x1f\xe1M', 0x0) pwritev2(r0, &(0x7f0000000680)=[{&(0x7f0000000540)="d7", 0x1}], 0x1, 0x0, 0x0, 0xc) 12:19:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/netpoll', 0x0, 0x41) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/217, 0xd9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000027f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0}]) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r3, @ANYRES16=r0], 0x220) 12:19:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/netpoll', 0x0, 0x41) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/217, 0xd9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000027f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0}]) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r3, @ANYRES16=r0], 0x220) [ 137.774498] Bluetooth: Unexpected start frame (len 1) 12:19:46 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x800}, {0x3f}, {0x7, 0xab}]}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = getpgid(0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x0, 0x7, 0x6, 0x0, 0xdcc0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0x0, 0x9, 0x0, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x3}, r3, 0x1, r1, 0xb) 12:19:46 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 12:19:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') poll(&(0x7f0000000000)=[{r0}], 0x1, 0x5) 12:19:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'lo\x00'}) 12:19:46 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x800}, {0x3f}, {0x7, 0xab}]}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = getpgid(0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x0, 0x7, 0x6, 0x0, 0xdcc0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0x0, 0x9, 0x0, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x3}, r3, 0x1, r1, 0xb) 12:19:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/netpoll', 0x0, 0x41) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/217, 0xd9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000027f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0}]) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r3, @ANYRES16=r0], 0x220) 12:19:46 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x40b42, 0x0) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r1 = clone3(&(0x7f0000000400)={0x4800, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x24}, &(0x7f0000000340)=""/14, 0xe, &(0x7f0000000380)=""/35, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xfd3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8, 0x0, 0x0, 0x8, 0xffffffffffffcc20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100001a, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x7, &(0x7f0000000040)=0x1, 0x4) 12:19:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000480)={{0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0xfd1, 0x0) msgctl$IPC_RMID(r0, 0x0) [ 138.001893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.002929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.088046] syz_tun: entered promiscuous mode [ 138.110593] syz_tun: left promiscuous mode [ 138.125010] syz_tun: entered promiscuous mode [ 138.126309] syz_tun: left promiscuous mode [ 138.510142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.511634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 12:19:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:19:47 executing program 7: execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x100) 12:19:47 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7700c24d06a708004500f8"], 0x0) 12:19:47 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x800}, {0x3f}, {0x7, 0xab}]}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = getpgid(0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x0, 0x7, 0x6, 0x0, 0xdcc0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0x0, 0x9, 0x0, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x3}, r3, 0x1, r1, 0xb) 12:19:47 executing program 3: io_setup(0x80000000, &(0x7f0000000000)) 12:19:47 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x1a5481, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) sendmmsg$inet(r3, &(0x7f0000005f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@ip_tos_int={{0x18}}], 0x18}}], 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@mcast1, 0x0, r6}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private0, 0x56, r6}) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@ip_tos_int={{0x18}}], 0x18}}], 0x2, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 12:19:47 executing program 0: syslog(0x2, 0x0, 0x0) 12:19:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0xb}}, 0x414c01) [ 138.583141] process 'syz-executor.7' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 138.589295] random: crng reseeded on system resumption [ 138.622571] random: crng reseeded on system resumption 12:19:47 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setresuid(0x0, r1, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) 12:19:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560f, &(0x7f0000000040)) 12:19:47 executing program 7: execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x100) 12:19:47 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x800}, {0x3f}, {0x7, 0xab}]}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = getpgid(0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x0, 0x7, 0x6, 0x0, 0xdcc0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0x0, 0x9, 0x0, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x3}, r3, 0x1, r1, 0xb) 12:19:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:19:47 executing program 2: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1) preadv(r0, &(0x7f0000002700)=[{0x0}, {&(0x7f0000001600)=""/121, 0x79}, {0x0}], 0x3, 0x0, 0x80000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$rtc(&(0x7f0000000300), 0x1, 0x2ac00) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x58, 0xd, 0x6, 0x5, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xd2f6) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) open_tree(r3, &(0x7f0000000200)='./file1\x00', 0x1001) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) 12:19:47 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x1a5481, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) sendmmsg$inet(r3, &(0x7f0000005f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@ip_tos_int={{0x18}}], 0x18}}], 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@mcast1, 0x0, r6}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private0, 0x56, r6}) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@ip_tos_int={{0x18}}], 0x18}}], 0x2, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 12:19:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x8) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1be12741a10fbc27002a68f1c831da0e760c1e0d490b", @ANYRESHEX=r0], 0x5c5042) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={0x0, 0x0, "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", "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"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x1, 0x4, 0x8, 0x0, 0x1, 0x80840, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x8ff, 0x8}, 0x10, 0x800000f4, 0x6, 0x2, 0x400, 0x10, 0x4, 0x0, 0x0, 0x0, 0xee}, 0xffffffffffffffff, 0x1, r3, 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x15, 0x3f, 0x1f, 0x6, 0x0, 0x0, 0x25001, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x10040, 0xfffffffffffff656, 0x7, 0x3, 0xff, 0x8, 0x400, 0x0, 0x7, 0x0, 0x1000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x6}) 12:19:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000060021"], 0x1c}}, 0x0) [ 138.857642] random: crng reseeded on system resumption [ 138.867231] audit: type=1400 audit(1679919587.342:18): avc: denied { tracepoint } for pid=4536 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 VM DIAGNOSIS: 12:19:39 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824f8615 RDI=ffffffff87f0bdc0 RBP=ffffffff87f0bd80 RSP=ffff888041b87650 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff87f0bd80 R14=0000000000000010 R15=ffffffff824f8600 RIP=ffffffff824f866d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9de0058700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2c12e000 CR3=000000000fc66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf34f80 RBX=0000000000000001 RCX=ffffffff8447058e RDX=ffffed100d9e69f1 RSI=0000000000000004 RDI=ffffffff81283605 RBP=dffffc0000000000 RSP=ffff888008e1fe68 R8 =0000000000000000 R9 =ffff88806cf34f83 R10=ffffed100d9e69f0 R11=0000000000000001 R12=ffffffff85d24510 R13=1ffff110011c3fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844715af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2c522000 CR3=000000000fbd8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff0000000000ff000000000000000000 XMM01=0100ff00000001000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f9db8cd17c800007f9db8cd17c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000