
Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:47528' (ECDSA) to the list of known hosts.
2022/09/13 16:54:54 fuzzer started
2022/09/13 16:54:54 dialing manager at localhost:36597
syzkaller login: [   39.253780] cgroup: Unknown subsys name 'net'
[   39.346934] cgroup: Unknown subsys name 'rlimit'
2022/09/13 16:55:08 syscalls: 2215
2022/09/13 16:55:08 code coverage: enabled
2022/09/13 16:55:08 comparison tracing: enabled
2022/09/13 16:55:08 extra coverage: enabled
2022/09/13 16:55:08 setuid sandbox: enabled
2022/09/13 16:55:08 namespace sandbox: enabled
2022/09/13 16:55:08 Android sandbox: enabled
2022/09/13 16:55:08 fault injection: enabled
2022/09/13 16:55:08 leak checking: enabled
2022/09/13 16:55:08 net packet injection: enabled
2022/09/13 16:55:08 net device setup: enabled
2022/09/13 16:55:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/13 16:55:08 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/13 16:55:08 USB emulation: enabled
2022/09/13 16:55:08 hci packet injection: enabled
2022/09/13 16:55:08 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913                                          )
2022/09/13 16:55:08 802.15.4 emulation: enabled
2022/09/13 16:55:08 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/13 16:55:08 fetching corpus: 50, signal 28071/31620 (executing program)
2022/09/13 16:55:08 fetching corpus: 100, signal 40064/45107 (executing program)
2022/09/13 16:55:09 fetching corpus: 150, signal 50139/56562 (executing program)
2022/09/13 16:55:09 fetching corpus: 200, signal 64471/71981 (executing program)
2022/09/13 16:55:09 fetching corpus: 250, signal 69548/78342 (executing program)
2022/09/13 16:55:09 fetching corpus: 300, signal 77653/87440 (executing program)
2022/09/13 16:55:09 fetching corpus: 350, signal 84405/95223 (executing program)
2022/09/13 16:55:09 fetching corpus: 400, signal 88187/100076 (executing program)
2022/09/13 16:55:09 fetching corpus: 450, signal 90295/103365 (executing program)
2022/09/13 16:55:10 fetching corpus: 500, signal 95716/109615 (executing program)
2022/09/13 16:55:10 fetching corpus: 550, signal 102553/117115 (executing program)
2022/09/13 16:55:10 fetching corpus: 600, signal 106128/121578 (executing program)
2022/09/13 16:55:10 fetching corpus: 650, signal 110018/126299 (executing program)
2022/09/13 16:55:10 fetching corpus: 700, signal 113834/130845 (executing program)
2022/09/13 16:55:10 fetching corpus: 750, signal 115796/133682 (executing program)
2022/09/13 16:55:10 fetching corpus: 800, signal 118356/137053 (executing program)
2022/09/13 16:55:11 fetching corpus: 850, signal 121616/140967 (executing program)
2022/09/13 16:55:11 fetching corpus: 900, signal 124512/144565 (executing program)
2022/09/13 16:55:11 fetching corpus: 950, signal 127583/148235 (executing program)
2022/09/13 16:55:11 fetching corpus: 1000, signal 129122/150559 (executing program)
2022/09/13 16:55:11 fetching corpus: 1050, signal 130908/153028 (executing program)
2022/09/13 16:55:11 fetching corpus: 1100, signal 132759/155571 (executing program)
2022/09/13 16:55:11 fetching corpus: 1150, signal 134618/158115 (executing program)
2022/09/13 16:55:11 fetching corpus: 1200, signal 136550/160691 (executing program)
2022/09/13 16:55:12 fetching corpus: 1250, signal 138788/163475 (executing program)
2022/09/13 16:55:12 fetching corpus: 1300, signal 140955/166088 (executing program)
2022/09/13 16:55:12 fetching corpus: 1350, signal 143505/169037 (executing program)
2022/09/13 16:55:12 fetching corpus: 1400, signal 144530/170753 (executing program)
2022/09/13 16:55:12 fetching corpus: 1450, signal 145700/172579 (executing program)
2022/09/13 16:55:12 fetching corpus: 1500, signal 146929/174401 (executing program)
2022/09/13 16:55:12 fetching corpus: 1550, signal 148515/176538 (executing program)
2022/09/13 16:55:13 fetching corpus: 1600, signal 150192/178625 (executing program)
2022/09/13 16:55:13 fetching corpus: 1650, signal 151293/180259 (executing program)
2022/09/13 16:55:13 fetching corpus: 1700, signal 152657/182149 (executing program)
2022/09/13 16:55:13 fetching corpus: 1750, signal 154756/184528 (executing program)
2022/09/13 16:55:13 fetching corpus: 1800, signal 156594/186652 (executing program)
2022/09/13 16:55:13 fetching corpus: 1850, signal 159516/189497 (executing program)
2022/09/13 16:55:14 fetching corpus: 1900, signal 161064/191351 (executing program)
2022/09/13 16:55:14 fetching corpus: 1950, signal 163042/193518 (executing program)
2022/09/13 16:55:14 fetching corpus: 2000, signal 164518/195256 (executing program)
2022/09/13 16:55:14 fetching corpus: 2050, signal 165749/196852 (executing program)
2022/09/13 16:55:14 fetching corpus: 2100, signal 167117/198587 (executing program)
2022/09/13 16:55:14 fetching corpus: 2150, signal 168384/200116 (executing program)
2022/09/13 16:55:14 fetching corpus: 2200, signal 169680/201678 (executing program)
2022/09/13 16:55:14 fetching corpus: 2250, signal 171080/203298 (executing program)
2022/09/13 16:55:15 fetching corpus: 2300, signal 172702/204995 (executing program)
2022/09/13 16:55:15 fetching corpus: 2350, signal 174351/206726 (executing program)
2022/09/13 16:55:15 fetching corpus: 2400, signal 175577/208189 (executing program)
2022/09/13 16:55:15 fetching corpus: 2450, signal 176657/209511 (executing program)
2022/09/13 16:55:15 fetching corpus: 2500, signal 178244/211103 (executing program)
2022/09/13 16:55:15 fetching corpus: 2550, signal 179317/212410 (executing program)
2022/09/13 16:55:15 fetching corpus: 2600, signal 181067/214040 (executing program)
2022/09/13 16:55:16 fetching corpus: 2650, signal 181920/215146 (executing program)
2022/09/13 16:55:16 fetching corpus: 2700, signal 183344/216634 (executing program)
2022/09/13 16:55:16 fetching corpus: 2750, signal 184522/217864 (executing program)
2022/09/13 16:55:16 fetching corpus: 2800, signal 185420/218988 (executing program)
2022/09/13 16:55:16 fetching corpus: 2850, signal 186902/220428 (executing program)
2022/09/13 16:55:16 fetching corpus: 2900, signal 188093/221690 (executing program)
2022/09/13 16:55:16 fetching corpus: 2950, signal 188760/222609 (executing program)
2022/09/13 16:55:16 fetching corpus: 3000, signal 189348/223491 (executing program)
2022/09/13 16:55:17 fetching corpus: 3050, signal 190702/224754 (executing program)
2022/09/13 16:55:17 fetching corpus: 3100, signal 191479/225707 (executing program)
2022/09/13 16:55:17 fetching corpus: 3150, signal 192674/226848 (executing program)
2022/09/13 16:55:17 fetching corpus: 3200, signal 193626/227841 (executing program)
2022/09/13 16:55:17 fetching corpus: 3250, signal 194774/228886 (executing program)
2022/09/13 16:55:17 fetching corpus: 3300, signal 195371/229692 (executing program)
2022/09/13 16:55:17 fetching corpus: 3350, signal 196044/230506 (executing program)
2022/09/13 16:55:17 fetching corpus: 3400, signal 196836/231334 (executing program)
2022/09/13 16:55:18 fetching corpus: 3450, signal 197818/232268 (executing program)
2022/09/13 16:55:18 fetching corpus: 3500, signal 199750/233654 (executing program)
2022/09/13 16:55:18 fetching corpus: 3550, signal 200748/234634 (executing program)
2022/09/13 16:55:18 fetching corpus: 3600, signal 201717/235563 (executing program)
2022/09/13 16:55:18 fetching corpus: 3650, signal 202689/236466 (executing program)
2022/09/13 16:55:18 fetching corpus: 3700, signal 203404/237211 (executing program)
2022/09/13 16:55:18 fetching corpus: 3750, signal 204311/238025 (executing program)
2022/09/13 16:55:19 fetching corpus: 3800, signal 205226/238855 (executing program)
2022/09/13 16:55:19 fetching corpus: 3850, signal 206816/239887 (executing program)
2022/09/13 16:55:19 fetching corpus: 3900, signal 207666/240618 (executing program)
2022/09/13 16:55:19 fetching corpus: 3950, signal 208209/241264 (executing program)
2022/09/13 16:55:19 fetching corpus: 4000, signal 208779/241932 (executing program)
2022/09/13 16:55:19 fetching corpus: 4050, signal 209703/242706 (executing program)
2022/09/13 16:55:19 fetching corpus: 4100, signal 210867/243563 (executing program)
2022/09/13 16:55:20 fetching corpus: 4150, signal 211601/244190 (executing program)
2022/09/13 16:55:20 fetching corpus: 4200, signal 212494/244864 (executing program)
2022/09/13 16:55:20 fetching corpus: 4250, signal 213558/245561 (executing program)
2022/09/13 16:55:20 fetching corpus: 4300, signal 214355/246200 (executing program)
2022/09/13 16:55:20 fetching corpus: 4350, signal 215135/246844 (executing program)
2022/09/13 16:55:20 fetching corpus: 4400, signal 216157/247511 (executing program)
2022/09/13 16:55:20 fetching corpus: 4450, signal 216614/247994 (executing program)
2022/09/13 16:55:21 fetching corpus: 4500, signal 217214/248513 (executing program)
2022/09/13 16:55:21 fetching corpus: 4550, signal 217825/249064 (executing program)
2022/09/13 16:55:21 fetching corpus: 4600, signal 219158/249856 (executing program)
2022/09/13 16:55:21 fetching corpus: 4650, signal 219955/250375 (executing program)
2022/09/13 16:55:21 fetching corpus: 4700, signal 220699/250891 (executing program)
2022/09/13 16:55:21 fetching corpus: 4750, signal 221537/251411 (executing program)
2022/09/13 16:55:21 fetching corpus: 4800, signal 222464/251921 (executing program)
2022/09/13 16:55:22 fetching corpus: 4850, signal 223179/252403 (executing program)
2022/09/13 16:55:22 fetching corpus: 4900, signal 224328/252968 (executing program)
2022/09/13 16:55:22 fetching corpus: 4950, signal 225034/253439 (executing program)
2022/09/13 16:55:22 fetching corpus: 5000, signal 225440/253800 (executing program)
2022/09/13 16:55:22 fetching corpus: 5050, signal 226135/254212 (executing program)
2022/09/13 16:55:22 fetching corpus: 5100, signal 226635/254600 (executing program)
2022/09/13 16:55:23 fetching corpus: 5150, signal 227253/255015 (executing program)
2022/09/13 16:55:23 fetching corpus: 5200, signal 228078/255473 (executing program)
2022/09/13 16:55:23 fetching corpus: 5250, signal 228553/255830 (executing program)
2022/09/13 16:55:23 fetching corpus: 5300, signal 229073/256254 (executing program)
2022/09/13 16:55:23 fetching corpus: 5350, signal 229587/256574 (executing program)
2022/09/13 16:55:23 fetching corpus: 5400, signal 230232/256924 (executing program)
2022/09/13 16:55:23 fetching corpus: 5450, signal 230887/257267 (executing program)
2022/09/13 16:55:24 fetching corpus: 5500, signal 231651/257640 (executing program)
2022/09/13 16:55:24 fetching corpus: 5550, signal 232189/257948 (executing program)
2022/09/13 16:55:24 fetching corpus: 5600, signal 232727/258228 (executing program)
2022/09/13 16:55:24 fetching corpus: 5650, signal 233415/258505 (executing program)
2022/09/13 16:55:24 fetching corpus: 5700, signal 233812/258777 (executing program)
2022/09/13 16:55:24 fetching corpus: 5750, signal 234225/259050 (executing program)
2022/09/13 16:55:24 fetching corpus: 5800, signal 234795/259329 (executing program)
2022/09/13 16:55:24 fetching corpus: 5850, signal 235293/259628 (executing program)
2022/09/13 16:55:25 fetching corpus: 5900, signal 235989/259932 (executing program)
2022/09/13 16:55:25 fetching corpus: 5950, signal 236668/260178 (executing program)
2022/09/13 16:55:25 fetching corpus: 6000, signal 237345/260413 (executing program)
2022/09/13 16:55:25 fetching corpus: 6050, signal 237927/260615 (executing program)
2022/09/13 16:55:25 fetching corpus: 6100, signal 238400/260822 (executing program)
2022/09/13 16:55:25 fetching corpus: 6150, signal 238920/261053 (executing program)
2022/09/13 16:55:26 fetching corpus: 6200, signal 239502/261246 (executing program)
2022/09/13 16:55:26 fetching corpus: 6250, signal 240261/261440 (executing program)
2022/09/13 16:55:26 fetching corpus: 6300, signal 240495/261629 (executing program)
2022/09/13 16:55:26 fetching corpus: 6350, signal 241000/261884 (executing program)
2022/09/13 16:55:26 fetching corpus: 6400, signal 241692/261887 (executing program)
2022/09/13 16:55:26 fetching corpus: 6450, signal 242428/261894 (executing program)
2022/09/13 16:55:26 fetching corpus: 6500, signal 242906/261906 (executing program)
2022/09/13 16:55:27 fetching corpus: 6550, signal 243558/261914 (executing program)
2022/09/13 16:55:27 fetching corpus: 6600, signal 243975/261935 (executing program)
2022/09/13 16:55:27 fetching corpus: 6650, signal 244498/261935 (executing program)
2022/09/13 16:55:27 fetching corpus: 6700, signal 244888/261955 (executing program)
2022/09/13 16:55:27 fetching corpus: 6750, signal 245427/261980 (executing program)
2022/09/13 16:55:27 fetching corpus: 6800, signal 246272/261996 (executing program)
2022/09/13 16:55:27 fetching corpus: 6850, signal 246808/262020 (executing program)
2022/09/13 16:55:28 fetching corpus: 6900, signal 247335/262024 (executing program)
2022/09/13 16:55:28 fetching corpus: 6950, signal 248492/262027 (executing program)
2022/09/13 16:55:28 fetching corpus: 7000, signal 248982/262052 (executing program)
2022/09/13 16:55:28 fetching corpus: 7050, signal 249321/262075 (executing program)
2022/09/13 16:55:28 fetching corpus: 7100, signal 249866/262163 (executing program)
2022/09/13 16:55:28 fetching corpus: 7150, signal 250186/262223 (executing program)
2022/09/13 16:55:28 fetching corpus: 7200, signal 250678/262256 (executing program)
2022/09/13 16:55:28 fetching corpus: 7250, signal 251003/262258 (executing program)
2022/09/13 16:55:29 fetching corpus: 7300, signal 251526/262263 (executing program)
2022/09/13 16:55:29 fetching corpus: 7350, signal 252100/262263 (executing program)
2022/09/13 16:55:29 fetching corpus: 7400, signal 252467/262285 (executing program)
2022/09/13 16:55:29 fetching corpus: 7439, signal 252858/262285 (executing program)
2022/09/13 16:55:29 fetching corpus: 7439, signal 252858/262285 (executing program)
2022/09/13 16:55:32 starting 8 fuzzer processes
16:55:32 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000840)='./file0\x00')

16:55:32 executing program 4:
syz_emit_ethernet(0x5e, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "27ec56", 0x28, 0x6, 0x0, @loopback, @mcast2, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}}, 0x0)

16:55:32 executing program 2:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000480)={0xe8, 0xbc, 0xfc, 0x6, 0x2b, 0x9})
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

16:55:32 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2)

16:55:32 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000240))

16:55:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002940), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000002e40)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x38}}, 0x0)

[   76.788314] audit: type=1400 audit(1663088132.534:6): avc:  denied  { execmem } for  pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
16:55:32 executing program 6:
futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0)

16:55:32 executing program 7:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
read$hiddev(r0, &(0x7f0000000c00)=""/4082, 0xfffffdef)

[   78.100885] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.101805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.102837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.103517] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.104177] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.104836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.106917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.108408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.109087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   78.110124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.110837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   78.111838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.115679] Bluetooth: hci1: HCI_REQ-0x0c1a
[   78.119804] Bluetooth: hci0: HCI_REQ-0x0c1a
[   78.168259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.169576] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.179994] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.209541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.210143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.210671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.211376] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   78.212272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   78.217619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   78.219797] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   78.220694] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.221634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.223064] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.224989] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   78.225991] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   78.227715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   78.228361] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   78.229186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.230042] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.231089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   78.231924] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   78.232934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.234169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.236203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.237937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   78.239832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   78.240654] Bluetooth: hci4: HCI_REQ-0x0c1a
[   78.244105] Bluetooth: hci3: HCI_REQ-0x0c1a
[   78.246189] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   78.275828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   78.287824] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   78.288869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.299234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   78.308618] Bluetooth: hci2: HCI_REQ-0x0c1a
[   78.313375] Bluetooth: hci6: HCI_REQ-0x0c1a
[   78.349620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   78.350447] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   78.355206] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   78.355865] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   78.359171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   78.361550] Bluetooth: hci5: HCI_REQ-0x0c1a
[   78.398070] Bluetooth: hci7: HCI_REQ-0x0c1a
[   80.179572] Bluetooth: hci0: command 0x0409 tx timeout
[   80.180638] Bluetooth: hci1: command 0x0409 tx timeout
[   80.308056] Bluetooth: hci4: command 0x0409 tx timeout
[   80.309206] Bluetooth: hci3: command 0x0409 tx timeout
[   80.371039] Bluetooth: hci6: command 0x0409 tx timeout
[   80.371836] Bluetooth: hci2: command 0x0409 tx timeout
[   80.372166] Bluetooth: hci5: command 0x0409 tx timeout
[   80.435060] Bluetooth: hci7: command 0x0409 tx timeout
[   82.227083] Bluetooth: hci1: command 0x041b tx timeout
[   82.227634] Bluetooth: hci0: command 0x041b tx timeout
[   82.355102] Bluetooth: hci3: command 0x041b tx timeout
[   82.355585] Bluetooth: hci4: command 0x041b tx timeout
[   82.419078] Bluetooth: hci5: command 0x041b tx timeout
[   82.419554] Bluetooth: hci2: command 0x041b tx timeout
[   82.420049] Bluetooth: hci6: command 0x041b tx timeout
[   82.484000] Bluetooth: hci7: command 0x041b tx timeout
[   84.276023] Bluetooth: hci0: command 0x040f tx timeout
[   84.276549] Bluetooth: hci1: command 0x040f tx timeout
[   84.404154] Bluetooth: hci4: command 0x040f tx timeout
[   84.404638] Bluetooth: hci3: command 0x040f tx timeout
[   84.467077] Bluetooth: hci6: command 0x040f tx timeout
[   84.467543] Bluetooth: hci2: command 0x040f tx timeout
[   84.468005] Bluetooth: hci5: command 0x040f tx timeout
[   84.532056] Bluetooth: hci7: command 0x040f tx timeout
[   86.323322] Bluetooth: hci1: command 0x0419 tx timeout
[   86.324293] Bluetooth: hci0: command 0x0419 tx timeout
[   86.451172] Bluetooth: hci3: command 0x0419 tx timeout
[   86.452024] Bluetooth: hci4: command 0x0419 tx timeout
[   86.515065] Bluetooth: hci5: command 0x0419 tx timeout
[   86.515543] Bluetooth: hci2: command 0x0419 tx timeout
[   86.516036] Bluetooth: hci6: command 0x0419 tx timeout
[   86.580046] Bluetooth: hci7: command 0x0419 tx timeout
16:56:30 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r0, &(0x7f0000000040)=0xffffffffffffffc0, r0, 0x0, 0x0, 0x0)

16:56:30 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)

16:56:31 executing program 6:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4)
syz_emit_ethernet(0x26, &(0x7f00000000c0)={@empty, @multicast, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @multicast1, @broadcast}}}}}, 0x0)

16:56:31 executing program 6:
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  135.711806] audit: type=1400 audit(1663088191.456:7): avc:  denied  { open } for  pid=3830 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  135.714461] audit: type=1400 audit(1663088191.457:8): avc:  denied  { kernel } for  pid=3830 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
16:56:31 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
fallocate(r0, 0x41, 0x0, 0x4)

16:56:31 executing program 6:
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_io_uring_setup(0x4d37, &(0x7f0000000b00), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
fcntl$getflags(r0, 0x408)

16:56:31 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x9effffff, &(0x7f00000002c0)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)

16:56:32 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x9effffff, &(0x7f00000002c0)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)

[  140.287171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  140.318212] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  140.320224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  140.324072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  140.325798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  140.328451] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  140.330708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  140.335537] Bluetooth: hci0: HCI_REQ-0x0c1a
[  140.337157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  140.372848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  140.381427] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  140.386360] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  140.387689] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  140.389760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  140.390716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  140.394744] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  140.395364] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  140.397606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  140.400863] Bluetooth: hci2: HCI_REQ-0x0c1a
[  140.412423] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  140.412497] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  140.416660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  140.418144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  140.419781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  140.420365] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  140.423772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  140.424225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  140.429809] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  140.434267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  140.438107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  140.439500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  140.445733] Bluetooth: hci3: HCI_REQ-0x0c1a
[  140.456177] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  140.468609] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  140.471207] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  140.472664] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  140.475307] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  140.477069] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  140.479254] Bluetooth: hci6: HCI_REQ-0x0c1a
[  140.495683] Bluetooth: hci5: HCI_REQ-0x0c1a
[  140.495687] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  140.520417] Bluetooth: hci4: HCI_REQ-0x0c1a
[  142.323083] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  142.387027] Bluetooth: hci0: command 0x0409 tx timeout
[  142.451022] Bluetooth: hci3: command 0x0409 tx timeout
[  142.451545] Bluetooth: hci2: command 0x0409 tx timeout
[  142.515263] Bluetooth: hci5: command 0x0409 tx timeout
[  142.516088] Bluetooth: hci6: command 0x0409 tx timeout
[  142.579089] Bluetooth: hci4: command 0x0409 tx timeout
[  144.435035] Bluetooth: hci0: command 0x041b tx timeout
[  144.499022] Bluetooth: hci2: command 0x041b tx timeout
[  144.499549] Bluetooth: hci3: command 0x041b tx timeout
[  144.563065] Bluetooth: hci6: command 0x041b tx timeout
[  144.563772] Bluetooth: hci5: command 0x041b tx timeout
[  144.627068] Bluetooth: hci4: command 0x041b tx timeout
[  145.166490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  145.177620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  145.178715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.182307] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.183701] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  145.185407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.188617] Bluetooth: hci1: HCI_REQ-0x0c1a
[  146.483056] Bluetooth: hci0: command 0x040f tx timeout
[  146.547042] Bluetooth: hci3: command 0x040f tx timeout
[  146.547568] Bluetooth: hci2: command 0x040f tx timeout
[  146.611025] Bluetooth: hci5: command 0x040f tx timeout
[  146.611527] Bluetooth: hci6: command 0x040f tx timeout
[  146.675017] Bluetooth: hci4: command 0x040f tx timeout
[  147.251024] Bluetooth: hci1: command 0x0409 tx timeout
[  148.531061] Bluetooth: hci0: command 0x0419 tx timeout
[  148.595023] Bluetooth: hci2: command 0x0419 tx timeout
[  148.595473] Bluetooth: hci3: command 0x0419 tx timeout
[  148.659056] Bluetooth: hci6: command 0x0419 tx timeout
[  148.659520] Bluetooth: hci5: command 0x0419 tx timeout
[  148.723255] Bluetooth: hci4: command 0x0419 tx timeout
[  149.299031] Bluetooth: hci1: command 0x041b tx timeout
[  151.347041] Bluetooth: hci1: command 0x040f tx timeout
[  153.395067] Bluetooth: hci1: command 0x0419 tx timeout
[  190.345234] ------------[ cut here ]------------
[  190.345259] 
[  190.345263] ======================================================
[  190.345266] WARNING: possible circular locking dependency detected
[  190.345270] 6.0.0-rc5-next-20220913 #1 Not tainted
[  190.345277] ------------------------------------------------------
[  190.345279] syz-executor.0/7091 is trying to acquire lock:
[  190.345289] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  190.345325] 
[  190.345325] but task is already holding lock:
[  190.345327] ffff888041865c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  190.345354] 
[  190.345354] which lock already depends on the new lock.
[  190.345354] 
[  190.345357] 
[  190.345357] the existing dependency chain (in reverse order) is:
[  190.345360] 
[  190.345360] -> #3 (&ctx->lock){....}-{2:2}:
[  190.345373]        _raw_spin_lock+0x2a/0x40
[  190.345389]        __perf_event_task_sched_out+0x53b/0x18d0
[  190.345402]        __schedule+0xedd/0x2470
[  190.345411]        schedule+0xda/0x1b0
[  190.345420]        exit_to_user_mode_prepare+0x114/0x1a0
[  190.345440]        syscall_exit_to_user_mode+0x19/0x40
[  190.345457]        do_syscall_64+0x48/0x90
[  190.345469]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  190.345486] 
[  190.345486] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  190.345500]        _raw_spin_lock_nested+0x30/0x40
[  190.345514]        raw_spin_rq_lock_nested+0x1e/0x30
[  190.345526]        task_fork_fair+0x63/0x4d0
[  190.345542]        sched_cgroup_fork+0x3d0/0x540
[  190.345555]        copy_process+0x3f9e/0x6df0
[  190.345566]        kernel_clone+0xe7/0x890
[  190.345575]        user_mode_thread+0xad/0xf0
[  190.345585]        rest_init+0x24/0x250
[  190.345600]        arch_call_rest_init+0xf/0x14
[  190.345619]        start_kernel+0x4c1/0x4e6
[  190.345636]        secondary_startup_64_no_verify+0xe0/0xeb
[  190.345649] 
[  190.345649] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  190.345663]        _raw_spin_lock_irqsave+0x39/0x60
[  190.345677]        try_to_wake_up+0xab/0x1920
[  190.345690]        up+0x75/0xb0
[  190.345701]        __up_console_sem+0x6e/0x80
[  190.345716]        console_unlock+0x46a/0x590
[  190.345731]        do_con_write+0xc05/0x1d50
[  190.345742]        con_write+0x21/0x40
[  190.345751]        n_tty_write+0x4d4/0xfe0
[  190.345764]        file_tty_write.constprop.0+0x49c/0x8f0
[  190.345775]        vfs_write+0x9c3/0xd90
[  190.345793]        ksys_write+0x127/0x250
[  190.345809]        do_syscall_64+0x3b/0x90
[  190.345821]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  190.345838] 
[  190.345838] -> #0 ((console_sem).lock){....}-{2:2}:
[  190.345851]        __lock_acquire+0x2a02/0x5e70
[  190.345867]        lock_acquire+0x1a2/0x530
[  190.345882]        _raw_spin_lock_irqsave+0x39/0x60
[  190.345896]        down_trylock+0xe/0x70
[  190.345908]        __down_trylock_console_sem+0x3b/0xd0
[  190.345924]        vprintk_emit+0x16b/0x560
[  190.345940]        vprintk+0x84/0xa0
[  190.345959]        _printk+0xba/0xf1
[  190.345975]        report_bug.cold+0x72/0xab
[  190.345987]        handle_bug+0x3c/0x70
[  190.345999]        exc_invalid_op+0x14/0x50
[  190.346012]        asm_exc_invalid_op+0x16/0x20
[  190.346027]        group_sched_out.part.0+0x2c7/0x460
[  190.346037]        ctx_sched_out+0x8f1/0xc10
[  190.346047]        __perf_event_task_sched_out+0x6d0/0x18d0
[  190.346059]        __schedule+0xedd/0x2470
[  190.346068]        schedule+0xda/0x1b0
[  190.346077]        futex_wait_queue+0xf5/0x1e0
[  190.346088]        futex_wait+0x28e/0x690
[  190.346098]        do_futex+0x2ff/0x380
[  190.346106]        __x64_sys_futex+0x1c6/0x4d0
[  190.346116]        do_syscall_64+0x3b/0x90
[  190.346128]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  190.346145] 
[  190.346145] other info that might help us debug this:
[  190.346145] 
[  190.346147] Chain exists of:
[  190.346147]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  190.346147] 
[  190.346162]  Possible unsafe locking scenario:
[  190.346162] 
[  190.346164]        CPU0                    CPU1
[  190.346166]        ----                    ----
[  190.346168]   lock(&ctx->lock);
[  190.346174]                                lock(&rq->__lock);
[  190.346180]                                lock(&ctx->lock);
[  190.346186]   lock((console_sem).lock);
[  190.346192] 
[  190.346192]  *** DEADLOCK ***
[  190.346192] 
[  190.346194] 2 locks held by syz-executor.0/7091:
[  190.346200]  #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  190.346226]  #1: ffff888041865c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  190.346253] 
[  190.346253] stack backtrace:
[  190.346256] CPU: 0 PID: 7091 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220913 #1
[  190.346268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  190.346277] Call Trace:
[  190.346280]  <TASK>
[  190.346284]  dump_stack_lvl+0x8b/0xb3
[  190.346299]  check_noncircular+0x263/0x2e0
[  190.346316]  ? format_decode+0x26c/0xb50
[  190.346331]  ? print_circular_bug+0x450/0x450
[  190.346348]  ? enable_ptr_key_workfn+0x20/0x20
[  190.346364]  ? format_decode+0x26c/0xb50
[  190.346380]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  190.346398]  __lock_acquire+0x2a02/0x5e70
[  190.346422]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  190.346440]  ? __mutex_add_waiter+0x120/0x120
[  190.346459]  lock_acquire+0x1a2/0x530
[  190.346477]  ? down_trylock+0xe/0x70
[  190.346492]  ? rcu_read_unlock+0x40/0x40
[  190.346514]  ? vprintk+0x84/0xa0
[  190.346533]  _raw_spin_lock_irqsave+0x39/0x60
[  190.346548]  ? down_trylock+0xe/0x70
[  190.346576]  down_trylock+0xe/0x70
[  190.346590]  ? vprintk+0x84/0xa0
[  190.346607]  __down_trylock_console_sem+0x3b/0xd0
[  190.346625]  vprintk_emit+0x16b/0x560
[  190.346645]  vprintk+0x84/0xa0
[  190.346663]  _printk+0xba/0xf1
[  190.346681]  ? record_print_text.cold+0x16/0x16
[  190.346704]  ? report_bug.cold+0x66/0xab
[  190.346718]  ? group_sched_out.part.0+0x2c7/0x460
[  190.346730]  report_bug.cold+0x72/0xab
[  190.346745]  handle_bug+0x3c/0x70
[  190.346759]  exc_invalid_op+0x14/0x50
[  190.346774]  asm_exc_invalid_op+0x16/0x20
[  190.346791] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  190.346804] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  190.346816] RSP: 0018:ffff888033eff8f8 EFLAGS: 00010006
[  190.346825] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  190.346832] RDX: ffff888042770000 RSI: ffffffff81566027 RDI: 0000000000000005
[  190.346840] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[  190.346848] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff888041865c00
[  190.346855] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  190.346867]  ? group_sched_out.part.0+0x2c7/0x460
[  190.346881]  ? group_sched_out.part.0+0x2c7/0x460
[  190.346894]  ctx_sched_out+0x8f1/0xc10
[  190.346907]  __perf_event_task_sched_out+0x6d0/0x18d0
[  190.346923]  ? lock_is_held_type+0xd7/0x130
[  190.346942]  ? __perf_cgroup_move+0x160/0x160
[  190.346954]  ? set_next_entity+0x304/0x550
[  190.346975]  ? lock_is_held_type+0xd7/0x130
[  190.346994]  __schedule+0xedd/0x2470
[  190.347008]  ? io_schedule_timeout+0x150/0x150
[  190.347020]  ? futex_wait_setup+0x166/0x230
[  190.347035]  schedule+0xda/0x1b0
[  190.347046]  futex_wait_queue+0xf5/0x1e0
[  190.347058]  futex_wait+0x28e/0x690
[  190.347071]  ? futex_wait_setup+0x230/0x230
[  190.347085]  ? wake_up_q+0x8b/0xf0
[  190.347098]  ? do_raw_spin_unlock+0x4f/0x220
[  190.347118]  ? futex_wake+0x158/0x490
[  190.347136]  ? fd_install+0x1f9/0x640
[  190.347152]  do_futex+0x2ff/0x380
[  190.347163]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  190.347180]  __x64_sys_futex+0x1c6/0x4d0
[  190.347193]  ? __x64_sys_futex_time32+0x480/0x480
[  190.347206]  ? syscall_enter_from_user_mode+0x1d/0x50
[  190.347225]  ? syscall_enter_from_user_mode+0x1d/0x50
[  190.347246]  do_syscall_64+0x3b/0x90
[  190.347260]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  190.347278] RIP: 0033:0x7f89e5429b19
[  190.347286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  190.347297] RSP: 002b:00007f89e299f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  190.347308] RAX: ffffffffffffffda RBX: 00007f89e553cf68 RCX: 00007f89e5429b19
[  190.347316] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f89e553cf68
[  190.347323] RBP: 00007f89e553cf60 R08: 0000000000000000 R09: 0000000000000000
[  190.347330] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f89e553cf6c
[  190.347338] R13: 00007fff0e93c40f R14: 00007f89e299f300 R15: 0000000000022000
[  190.347352]  </TASK>
[  190.407365] WARNING: CPU: 0 PID: 7091 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  190.408050] Modules linked in:
[  190.408273] CPU: 0 PID: 7091 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220913 #1
[  190.408810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  190.409545] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  190.409909] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  190.411103] RSP: 0018:ffff888033eff8f8 EFLAGS: 00010006
[  190.411461] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  190.411926] RDX: ffff888042770000 RSI: ffffffff81566027 RDI: 0000000000000005
[  190.412396] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[  190.412935] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff888041865c00
[  190.413465] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  190.413997] FS:  00007f89e299f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  190.414621] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  190.415065] CR2: 00007f8bcef671f0 CR3: 0000000015e62000 CR4: 0000000000350ef0
[  190.415599] Call Trace:
[  190.415797]  <TASK>
[  190.415975]  ctx_sched_out+0x8f1/0xc10
[  190.416269]  __perf_event_task_sched_out+0x6d0/0x18d0
[  190.416659]  ? lock_is_held_type+0xd7/0x130
[  190.416992]  ? __perf_cgroup_move+0x160/0x160
[  190.417336]  ? set_next_entity+0x304/0x550
[  190.417665]  ? lock_is_held_type+0xd7/0x130
[  190.417998]  __schedule+0xedd/0x2470
[  190.418290]  ? io_schedule_timeout+0x150/0x150
[  190.418652]  ? futex_wait_setup+0x166/0x230
[  190.418981]  schedule+0xda/0x1b0
[  190.419251]  futex_wait_queue+0xf5/0x1e0
[  190.419555]  futex_wait+0x28e/0x690
[  190.419835]  ? futex_wait_setup+0x230/0x230
[  190.420159]  ? wake_up_q+0x8b/0xf0
[  190.420436]  ? do_raw_spin_unlock+0x4f/0x220
[  190.420783]  ? futex_wake+0x158/0x490
[  190.421078]  ? fd_install+0x1f9/0x640
[  190.421372]  do_futex+0x2ff/0x380
[  190.421638]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  190.422080]  __x64_sys_futex+0x1c6/0x4d0
[  190.422392]  ? __x64_sys_futex_time32+0x480/0x480
[  190.422771]  ? syscall_enter_from_user_mode+0x1d/0x50
[  190.423163]  ? syscall_enter_from_user_mode+0x1d/0x50
[  190.423561]  do_syscall_64+0x3b/0x90
[  190.423845]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  190.424238] RIP: 0033:0x7f89e5429b19
[  190.424521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  190.425878] RSP: 002b:00007f89e299f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  190.426440] RAX: ffffffffffffffda RBX: 00007f89e553cf68 RCX: 00007f89e5429b19
[  190.426975] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f89e553cf68
[  190.427505] RBP: 00007f89e553cf60 R08: 0000000000000000 R09: 0000000000000000
[  190.428041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f89e553cf6c
[  190.428573] R13: 00007fff0e93c40f R14: 00007f89e299f300 R15: 0000000000022000
[  190.429108]  </TASK>
[  190.429287] irq event stamp: 340
[  190.429544] hardirqs last  enabled at (339): [<ffffffff84241efd>] syscall_enter_from_user_mode+0x1d/0x50
[  190.430253] hardirqs last disabled at (340): [<ffffffff8424b1d5>] __schedule+0x1225/0x2470
[  190.430867] softirqs last  enabled at (90): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  190.431501] softirqs last disabled at (57): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  190.432137] ---[ end trace 0000000000000000 ]---
[  190.466366] audit: type=1400 audit(1663088246.212:9): avc:  denied  { write } for  pid=7093 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  190.524525] random: crng reseeded on system resumption
[  190.526886] Restarting kernel threads ... done.
[  190.579952] random: crng reseeded on system resumption
[  190.585071] Restarting kernel threads ... done.
16:57:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002940), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000002e40)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x38}}, 0x0)

16:57:26 executing program 4:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000480)={0xe8, 0xbc, 0xfc, 0x6, 0x2b, 0x9})
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

16:57:26 executing program 2:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000480)={0xe8, 0xbc, 0xfc, 0x6, 0x2b, 0x9})
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

16:57:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000840)='./file0\x00')

16:57:26 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x9effffff, &(0x7f00000002c0)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)

16:57:26 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2)

16:57:26 executing program 7:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
read$hiddev(r0, &(0x7f0000000c00)=""/4082, 0xfffffdef)

16:57:26 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000240))

16:57:26 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000240))

16:57:26 executing program 7:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
read$hiddev(r0, &(0x7f0000000c00)=""/4082, 0xfffffdef)

[  190.816540] random: crng reseeded on system resumption
[  190.830733] Restarting kernel threads ... done.
16:57:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002940), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000002e40)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x38}}, 0x0)

16:57:26 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2)

16:57:26 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000240))

16:57:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000840)='./file0\x00')

16:57:26 executing program 7:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
read$hiddev(r0, &(0x7f0000000c00)=""/4082, 0xfffffdef)

16:57:26 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x9effffff, &(0x7f00000002c0)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)

16:57:26 executing program 2:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000480)={0xe8, 0xbc, 0xfc, 0x6, 0x2b, 0x9})
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

16:57:26 executing program 4:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000480)={0xe8, 0xbc, 0xfc, 0x6, 0x2b, 0x9})
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

[  190.953992] random: crng reseeded on system resumption
[  190.971694] Restarting kernel threads ... done.
16:57:26 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2)

16:57:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002940), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000002e40)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x38}}, 0x0)

16:57:26 executing program 1:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000480)={0xe8, 0xbc, 0xfc, 0x6, 0x2b, 0x9})
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

16:57:26 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2)

16:57:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000840)='./file0\x00')

16:57:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0))

16:57:26 executing program 4:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000480)={0xe8, 0xbc, 0xfc, 0x6, 0x2b, 0x9})
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

16:57:26 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2)

[  191.114605] random: crng reseeded on system resumption
[  191.133331] Restarting kernel threads ... done.
16:57:26 executing program 2:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000480)={0xe8, 0xbc, 0xfc, 0x6, 0x2b, 0x9})
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

16:57:26 executing program 1:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000480)={0xe8, 0xbc, 0xfc, 0x6, 0x2b, 0x9})
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

16:57:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0))

16:57:26 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2)

16:57:26 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x20}, 0xe)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0)

16:57:26 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x1000000, 0x4)

16:57:26 executing program 0:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x18000, 0x41)
r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5f000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000be000000000000be000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c0000000000001c00080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="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"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000010e00)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000000380)="01001e000000010000000a001f000000010000660069006c0065003000000000b16113d2b6ab3bdc95637419fb8b01934c3a05d134aca97d47a49ff9640b1f1fd8e2a49c1711dd7a2c0ec285b3fca442fd453c8c8a7af93432381d69863cd5016e19949fc91b86d132fb412a22061bd6b6ab5cb5fc5dd7a2a43909ec2253203a9493d2ddc2a4f58e", 0x88, 0xc000}, {&(0x7f0000011000)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011100)="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"/288, 0x120, 0xe000}, {&(0x7f0000011300)="22001d0000000000001d00080000000008007809140b2a3a0802000001000001010022001c0000000000001c00080000000008007809140b2a3a080200000100000101012a0027000000000000271a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0xe800}, {&(0x7f0000011400)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400200000000000002064000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0021000000000000210a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00220000000000002228230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00220000000000002228230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0xf000}, {&(0x7f0000011600)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c0027000000000000271a0400000000041a7809140b2a3a08000000010000010a00660069006c0065003000"/128, 0x80, 0xf800}, {&(0x7f0000011700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10000}, {&(0x7f0000011800)='syzkallers\x00'/32, 0x20, 0x10800}, {&(0x7f0000011900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x13800}], 0x0, &(0x7f0000011e00))
mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0xc000, 0x1)

16:57:26 executing program 6:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
acct(&(0x7f0000000280)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[  191.249270] Process accounting resumed
16:57:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0))

[  191.300496] Process accounting resumed
[  191.319568] random: crng reseeded on system resumption
[  191.337774] Restarting kernel threads ... done.
16:57:27 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x20}, 0xe)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0)

16:57:27 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0)

16:57:27 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000180), 0x0, 0x4)

16:57:27 executing program 6:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f00000001c0))

16:57:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0))

16:57:27 executing program 2:
r0 = epoll_create(0x80)
r1 = inotify_init1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2)

16:57:27 executing program 1:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000480)={0xe8, 0xbc, 0xfc, 0x6, 0x2b, 0x9})
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

16:57:27 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x20}, 0xe)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0)

[  192.183979] hrtimer: interrupt took 19076 ns
16:57:27 executing program 6:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={0x0, 0x101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x28}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1f, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x7c15d26423b56037)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
copy_file_range(r4, 0x0, r2, 0x0, 0x7, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000100)=0x800000e7, 0x4)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000200), 0x0)
write(r5, &(0x7f0000000080)="01", 0x41030)

16:57:27 executing program 2:
r0 = epoll_create(0x80)
r1 = inotify_init1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2)

16:57:27 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0)

16:57:27 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000180), 0x0, 0x4)

16:57:28 executing program 2:
r0 = epoll_create(0x80)
r1 = inotify_init1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2)

16:57:28 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000180), 0x0, 0x4)

[  192.373859] random: crng reseeded on system resumption
16:57:28 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0)

16:57:28 executing program 2:
r0 = epoll_create(0x80)
r1 = inotify_init1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2)

[  192.479720] Restarting kernel threads ... done.
16:57:28 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000180), 0x0, 0x4)

16:57:28 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0)

16:57:28 executing program 6:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={0x0, 0x101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x28}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1f, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x7c15d26423b56037)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
copy_file_range(r4, 0x0, r2, 0x0, 0x7, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000100)=0x800000e7, 0x4)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000200), 0x0)
write(r5, &(0x7f0000000080)="01", 0x41030)

16:57:28 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x20}, 0xe)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0)

16:57:28 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x20}, 0xe)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0)

16:57:28 executing program 6:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={0x0, 0x101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x28}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1f, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x7c15d26423b56037)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
copy_file_range(r4, 0x0, r2, 0x0, 0x7, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000100)=0x800000e7, 0x4)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000200), 0x0)
write(r5, &(0x7f0000000080)="01", 0x41030)

[  193.267829] Bluetooth: hci1: command 0x0405 tx timeout
16:57:29 executing program 6:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={0x0, 0x101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x28}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1f, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x7c15d26423b56037)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
copy_file_range(r4, 0x0, r2, 0x0, 0x7, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000100)=0x800000e7, 0x4)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000200), 0x0)
write(r5, &(0x7f0000000080)="01", 0x41030)

16:57:29 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x20}, 0xe)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0)

16:57:29 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x20}, 0xe)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0)

16:57:30 executing program 2:
r0 = epoll_create(0x80)
r1 = inotify_init1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2)

16:57:30 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x10, 0x0, 0x410)

16:57:30 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000001440)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

16:57:30 executing program 5:
execveat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0)

16:57:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000040)='bdev\x00', 0x0)

16:57:30 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

16:57:30 executing program 2:
r0 = epoll_create(0x80)
r1 = inotify_init1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2)

16:57:30 executing program 3:
prctl$PR_SET_IO_FLUSHER(0x2a, 0x1)

16:57:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$setperm(0x12, 0x0, 0x0)

16:57:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000500000008"], 0x125)
read(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x6, 0x9, 0x85, 0xf7, 0x0, 0x81, 0xc00, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x5, 0x69e}, 0x5499, 0x1, 0x423d, 0x8, 0x7, 0x8, 0x1, 0x0, 0xc0000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, r0, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x23, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0)

[  194.693840] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in;
[  194.693840]    program syz-executor.5 not setting count and/or reply_len properly
16:57:30 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000280)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)

16:57:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000500000008"], 0x125)
read(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x6, 0x9, 0x85, 0xf7, 0x0, 0x81, 0xc00, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x5, 0x69e}, 0x5499, 0x1, 0x423d, 0x8, 0x7, 0x8, 0x1, 0x0, 0xc0000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, r0, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x23, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0)

16:57:30 executing program 2:
r0 = epoll_create(0x80)
r1 = inotify_init1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2)

16:57:30 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={<r1=>0x0, ""/256, <r2=>0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x3, "bc386eff17b8c9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e780)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x7, "381f43ba82636b"})
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bc, 0x20, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0)
close(r5)
finit_module(r0, &(0x7f00000005c0)='\x00', 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r6, 0xffffffffffffffff)

16:57:30 executing program 3:
prctl$PR_SET_IO_FLUSHER(0x2a, 0x1)

16:57:30 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

16:57:30 executing program 0:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:30 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001b40)=[{0x0}], 0x1)

16:57:30 executing program 0:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:30 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

16:57:30 executing program 3:
prctl$PR_SET_IO_FLUSHER(0x2a, 0x1)

16:57:30 executing program 2:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:30 executing program 7:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:30 executing program 2:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:30 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001b40)=[{0x0}], 0x1)

16:57:31 executing program 3:
prctl$PR_SET_IO_FLUSHER(0x2a, 0x1)

16:57:31 executing program 0:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:31 executing program 7:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:31 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

16:57:31 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001b40)=[{0x0}], 0x1)

16:57:31 executing program 2:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={<r1=>0x0, ""/256, <r2=>0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x3, "bc386eff17b8c9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e780)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x7, "381f43ba82636b"})
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bc, 0x20, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0)
close(r5)
finit_module(r0, &(0x7f00000005c0)='\x00', 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r6, 0xffffffffffffffff)

16:57:31 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000500000008"], 0x125)
read(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x6, 0x9, 0x85, 0xf7, 0x0, 0x81, 0xc00, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x5, 0x69e}, 0x5499, 0x1, 0x423d, 0x8, 0x7, 0x8, 0x1, 0x0, 0xc0000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, r0, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x23, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0)

16:57:31 executing program 7:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:31 executing program 0:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:31 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001b40)=[{0x0}], 0x1)

16:57:31 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001b40)=[{0x0}], 0x1)

16:57:31 executing program 3:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:31 executing program 6:
r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)

[  195.666136] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in;
[  195.666136]    program syz-executor.5 not setting count and/or reply_len properly
16:57:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
unlink(&(0x7f0000000380)='./file1\x00')
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

16:57:31 executing program 7:
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r0, &(0x7f0000007bc0)={0x0, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}], 0x2, &(0x7f0000007b40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0)

16:57:31 executing program 3:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:31 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001b40)=[{0x0}], 0x1)

16:57:31 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x7, 0xc, 0x5, 0x3, 0x0, [{@remote}]}]}}}], 0x20}}], 0x1, 0x0)

16:57:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={<r1=>0x0, ""/256, <r2=>0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x3, "bc386eff17b8c9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e780)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x7, "381f43ba82636b"})
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bc, 0x20, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0)
close(r5)
finit_module(r0, &(0x7f00000005c0)='\x00', 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r6, 0xffffffffffffffff)

16:57:31 executing program 7:
perf_event_open(&(0x7f0000002600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  195.985672] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  195.986824] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  195.987702] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  195.988501] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  195.989393] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2
[  195.993446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  195.994053] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.994895] Buffer I/O error on dev sr0, logical block 0, async page read
[  195.997524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  195.998126] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.998985] Buffer I/O error on dev sr0, logical block 1, async page read
[  196.001244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.001796] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  196.002671] Buffer I/O error on dev sr0, logical block 2, async page read
[  196.003874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.004477] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  196.005365] Buffer I/O error on dev sr0, logical block 3, async page read
[  196.006587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.007196] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  196.008091] Buffer I/O error on dev sr0, logical block 4, async page read
[  196.010301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.010994] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  196.011990] Buffer I/O error on dev sr0, logical block 5, async page read
[  196.013903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.014595] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  196.015689] Buffer I/O error on dev sr0, logical block 6, async page read
[  196.042806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.043579] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  196.044582] Buffer I/O error on dev sr0, logical block 7, async page read
[  196.049696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.050298] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  196.051155] Buffer I/O error on dev sr0, logical block 0, async page read
[  196.055673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.057029] Buffer I/O error on dev sr0, logical block 1, async page read
[  196.059721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.060797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.061861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.062928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.064836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.066791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.068871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.072268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.073757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.074894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.076420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.077560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.079054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.080686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.082524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.083638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.084721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.085806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.086999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.088136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.089571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.090678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.092695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.093876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.095082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.096223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.097883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.099047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.100242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.101471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.103210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.104353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.105524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.106591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.107686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.108793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.109866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.111742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.113949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.115081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.116275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.117630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.118734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.119818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.120889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.122017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.124233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.125418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.126555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.127672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.128802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.129932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.131487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.132583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.134630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.135770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.136926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.138295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.139484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.140577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.141641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.142802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.145573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.146628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.147705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.148845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.149918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.151776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.152871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.153986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.156426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.157509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.158604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.159702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.160783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.161901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.163302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.164677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.166785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.167880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.168932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.170093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.171874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.172788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.174154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.175484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.177123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.178159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.179795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.180884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.182011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.183595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.184639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.185720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.187553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.188661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.189739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.190794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.191846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.192917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.194015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.195167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.197714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.198844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.199917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.200940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.202506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.238062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.278202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.283111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.303213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.311490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.315105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.327130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.331422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.340704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.349749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.355367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.376740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.382653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.388855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.399988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.411982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.418578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.427185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.440922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.460449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.465123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.477547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.490447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.499523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.509248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.519798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.528543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.550696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.560750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.568238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.572416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.579141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.592810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.599880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.609034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.752546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.753609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.754642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.755658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.756607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.757558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.758514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  196.759563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
16:57:32 executing program 7:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a000102"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:57:32 executing program 0:
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)

16:57:32 executing program 3:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, 0x0)
read(r0, &(0x7f0000000140)=""/157, 0x9d)

16:57:32 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001b40)=[{0x0}], 0x1)

16:57:32 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup2(r0, r0)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000fc0)=0x10001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0)

16:57:32 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={<r1=>0x0, ""/256, <r2=>0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x3, "bc386eff17b8c9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e780)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x7, "381f43ba82636b"})
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bc, 0x20, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0)
close(r5)
finit_module(r0, &(0x7f00000005c0)='\x00', 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r6, 0xffffffffffffffff)

16:57:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000500000008"], 0x125)
read(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x6, 0x9, 0x85, 0xf7, 0x0, 0x81, 0xc00, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x5, 0x69e}, 0x5499, 0x1, 0x423d, 0x8, 0x7, 0x8, 0x1, 0x0, 0xc0000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, r0, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x23, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0)

16:57:32 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

16:57:32 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00')

16:57:32 executing program 7:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a000102"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:57:32 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup2(r0, r0)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000fc0)=0x10001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0)

16:57:32 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup2(r0, r0)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000fc0)=0x10001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0)

16:57:32 executing program 4:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a000102"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:57:32 executing program 7:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a000102"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:57:32 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup2(r0, r0)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000fc0)=0x10001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0)

16:57:32 executing program 4:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a000102"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:57:32 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup2(r0, r0)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000fc0)=0x10001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0)

16:57:32 executing program 2:
r0 = getpid()
r1 = getpid()
kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

16:57:33 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup2(r0, r0)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000fc0)=0x10001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0)

16:57:33 executing program 7:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a000102"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:57:33 executing program 4:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a000102"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:57:33 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00')

16:57:33 executing program 3:
io_setup(0x6, &(0x7f0000000080)=<r0=>0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

16:57:33 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup2(r0, r0)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000fc0)=0x10001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0)

16:57:33 executing program 2:
r0 = getpid()
r1 = getpid()
kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

16:57:33 executing program 7:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00')

16:57:33 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0)

16:57:33 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xfffffffffffffcf3, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x4}]}, 0x2c}], 0x1}, 0x0)

[  197.805863] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
16:57:33 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x7}})

16:57:33 executing program 2:
r0 = getpid()
r1 = getpid()
kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

16:57:33 executing program 3:
io_setup(0x6, &(0x7f0000000080)=<r0=>0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

16:57:33 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000012f00))

16:57:33 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000440))

16:57:33 executing program 2:
r0 = getpid()
r1 = getpid()
kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

16:57:33 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00')

16:57:33 executing program 7:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00')

16:57:33 executing program 5:
r0 = getpid()
r1 = io_uring_setup(0x454c, &(0x7f0000000240))
r2 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000680))
r3 = getpid()
kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r1, &(0x7f00000002c0)={r2, r1, 0x6})

16:57:33 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xfffffffffffffcf3, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x4}]}, 0x2c}], 0x1}, 0x0)

[  198.006219] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
16:57:33 executing program 3:
io_setup(0x6, &(0x7f0000000080)=<r0=>0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

16:57:33 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xfffffffffffffcf3, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x4}]}, 0x2c}], 0x1}, 0x0)

16:57:33 executing program 2:
r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7)
fcntl$addseals(r0, 0x409, 0xc)
fcntl$addseals(r0, 0x409, 0x8)

16:57:33 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000440))

16:57:33 executing program 5:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0xbd, 0x4, 0x7, 0x0, 0x3, 0xc218, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x5, @perf_config_ext={0x7462, 0x4}, 0x0, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40)

[  198.174197] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
16:57:34 executing program 3:
io_setup(0x6, &(0x7f0000000080)=<r0=>0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

16:57:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xfffffffffffffcf3, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x4}]}, 0x2c}], 0x1}, 0x0)

16:57:34 executing program 2:
r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7)
fcntl$addseals(r0, 0x409, 0xc)
fcntl$addseals(r0, 0x409, 0x8)

16:57:34 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000440))

16:57:34 executing program 5:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0xbd, 0x4, 0x7, 0x0, 0x3, 0xc218, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x5, @perf_config_ext={0x7462, 0x4}, 0x0, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40)

16:57:34 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000012f00))

16:57:34 executing program 7:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00')

16:57:34 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00')

[  198.473713] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
16:57:34 executing program 5:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0xbd, 0x4, 0x7, 0x0, 0x3, 0xc218, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x5, @perf_config_ext={0x7462, 0x4}, 0x0, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40)

16:57:34 executing program 1:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0xbd, 0x4, 0x7, 0x0, 0x3, 0xc218, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x5, @perf_config_ext={0x7462, 0x4}, 0x0, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f
VM DIAGNOSIS:
16:57:26  Registers:
info registers vcpu 0
RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888033eff348
R8 =0000000000000001 R9 =000000000000000a R10=000000000000002e R11=0000000000000001
R12=000000000000002e R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0
RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f89e299f700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8bcef671f0 CR3=0000000015e62000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f89e55107c0 00007f89e55107c8
YMM02=0000000000000000 0000000000000000 00007f89e55107e0 00007f89e55107c0
YMM03=0000000000000000 0000000000000000 00007f89e55107c8 00007f89e55107c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806ce3eda0 RCX=0000000000000000 RDX=ffff888041188000
RSI=ffffffff813bccdb RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88804141f960
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffed100d9c7db5 R13=ffff88806ce3eda8 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff813bccdd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556663400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f89e55326dc CR3=0000000015e62000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f89e55107c0 00007f89e55107c8
YMM02=0000000000000000 0000000000000000 00007f89e55107e0 00007f89e55107c0
YMM03=0000000000000000 0000000000000000 00007f89e55107c8 00007f89e55107c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000