Warning: Permanently added '[localhost]:2392' (ECDSA) to the list of known hosts. 2022/10/06 11:38:06 fuzzer started 2022/10/06 11:38:06 dialing manager at localhost:37161 syzkaller login: [ 40.165008] cgroup: Unknown subsys name 'net' [ 40.262264] cgroup: Unknown subsys name 'rlimit' 2022/10/06 11:38:19 syscalls: 2215 2022/10/06 11:38:19 code coverage: enabled 2022/10/06 11:38:19 comparison tracing: enabled 2022/10/06 11:38:19 extra coverage: enabled 2022/10/06 11:38:19 setuid sandbox: enabled 2022/10/06 11:38:19 namespace sandbox: enabled 2022/10/06 11:38:19 Android sandbox: enabled 2022/10/06 11:38:19 fault injection: enabled 2022/10/06 11:38:19 leak checking: enabled 2022/10/06 11:38:19 net packet injection: enabled 2022/10/06 11:38:19 net device setup: enabled 2022/10/06 11:38:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/06 11:38:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/06 11:38:19 USB emulation: enabled 2022/10/06 11:38:19 hci packet injection: enabled 2022/10/06 11:38:19 wifi device emulation: failed to parse kernel version (6.0.0-next-20221006) 2022/10/06 11:38:19 802.15.4 emulation: enabled 2022/10/06 11:38:19 fetching corpus: 0, signal 0/2000 (executing program) 2022/10/06 11:38:20 fetching corpus: 50, signal 30598/33840 (executing program) 2022/10/06 11:38:20 fetching corpus: 100, signal 37056/41673 (executing program) 2022/10/06 11:38:20 fetching corpus: 150, signal 46004/51723 (executing program) 2022/10/06 11:38:20 fetching corpus: 200, signal 50453/57295 (executing program) 2022/10/06 11:38:20 fetching corpus: 250, signal 54275/62142 (executing program) 2022/10/06 11:38:20 fetching corpus: 300, signal 57462/66391 (executing program) 2022/10/06 11:38:20 fetching corpus: 350, signal 61853/71633 (executing program) 2022/10/06 11:38:20 fetching corpus: 400, signal 66324/76796 (executing program) 2022/10/06 11:38:21 fetching corpus: 450, signal 69608/80830 (executing program) 2022/10/06 11:38:21 fetching corpus: 500, signal 72246/84240 (executing program) 2022/10/06 11:38:21 fetching corpus: 550, signal 76666/89020 (executing program) 2022/10/06 11:38:21 fetching corpus: 600, signal 79383/92352 (executing program) 2022/10/06 11:38:21 fetching corpus: 650, signal 81623/95189 (executing program) 2022/10/06 11:38:21 fetching corpus: 700, signal 83590/97781 (executing program) 2022/10/06 11:38:21 fetching corpus: 750, signal 86747/101218 (executing program) 2022/10/06 11:38:21 fetching corpus: 800, signal 88266/103341 (executing program) 2022/10/06 11:38:21 fetching corpus: 850, signal 91160/106472 (executing program) 2022/10/06 11:38:22 fetching corpus: 900, signal 92670/108462 (executing program) 2022/10/06 11:38:22 fetching corpus: 950, signal 95310/111264 (executing program) 2022/10/06 11:38:22 fetching corpus: 1000, signal 96892/113224 (executing program) 2022/10/06 11:38:22 fetching corpus: 1050, signal 98032/114874 (executing program) 2022/10/06 11:38:22 fetching corpus: 1100, signal 100041/117109 (executing program) 2022/10/06 11:38:22 fetching corpus: 1150, signal 102280/119450 (executing program) 2022/10/06 11:38:22 fetching corpus: 1200, signal 103770/121193 (executing program) 2022/10/06 11:38:22 fetching corpus: 1250, signal 105579/123125 (executing program) 2022/10/06 11:38:22 fetching corpus: 1300, signal 107313/124916 (executing program) 2022/10/06 11:38:23 fetching corpus: 1350, signal 108992/126668 (executing program) 2022/10/06 11:38:23 fetching corpus: 1400, signal 109878/127880 (executing program) 2022/10/06 11:38:23 fetching corpus: 1450, signal 111284/129400 (executing program) 2022/10/06 11:38:23 fetching corpus: 1500, signal 112384/130673 (executing program) 2022/10/06 11:38:23 fetching corpus: 1550, signal 113625/132040 (executing program) 2022/10/06 11:38:23 fetching corpus: 1600, signal 114412/133057 (executing program) 2022/10/06 11:38:23 fetching corpus: 1650, signal 115905/134467 (executing program) 2022/10/06 11:38:23 fetching corpus: 1700, signal 117301/135764 (executing program) 2022/10/06 11:38:23 fetching corpus: 1750, signal 118278/136869 (executing program) 2022/10/06 11:38:23 fetching corpus: 1800, signal 119532/138057 (executing program) 2022/10/06 11:38:24 fetching corpus: 1850, signal 120868/139247 (executing program) 2022/10/06 11:38:24 fetching corpus: 1900, signal 121889/140258 (executing program) 2022/10/06 11:38:24 fetching corpus: 1950, signal 122681/141147 (executing program) 2022/10/06 11:38:24 fetching corpus: 2000, signal 123235/141908 (executing program) 2022/10/06 11:38:24 fetching corpus: 2050, signal 125321/143442 (executing program) 2022/10/06 11:38:24 fetching corpus: 2100, signal 126321/144320 (executing program) 2022/10/06 11:38:24 fetching corpus: 2150, signal 127630/145315 (executing program) 2022/10/06 11:38:24 fetching corpus: 2200, signal 128824/146228 (executing program) 2022/10/06 11:38:24 fetching corpus: 2250, signal 129607/146946 (executing program) 2022/10/06 11:38:24 fetching corpus: 2300, signal 130997/147895 (executing program) 2022/10/06 11:38:25 fetching corpus: 2350, signal 131891/148641 (executing program) 2022/10/06 11:38:25 fetching corpus: 2400, signal 132758/149398 (executing program) 2022/10/06 11:38:25 fetching corpus: 2450, signal 133695/150068 (executing program) 2022/10/06 11:38:25 fetching corpus: 2500, signal 134605/150719 (executing program) 2022/10/06 11:38:25 fetching corpus: 2550, signal 135407/151333 (executing program) 2022/10/06 11:38:25 fetching corpus: 2600, signal 135972/151807 (executing program) 2022/10/06 11:38:25 fetching corpus: 2650, signal 136665/152340 (executing program) 2022/10/06 11:38:25 fetching corpus: 2700, signal 137512/152877 (executing program) 2022/10/06 11:38:25 fetching corpus: 2750, signal 138249/153387 (executing program) 2022/10/06 11:38:26 fetching corpus: 2800, signal 139048/153920 (executing program) 2022/10/06 11:38:26 fetching corpus: 2850, signal 139525/154319 (executing program) 2022/10/06 11:38:26 fetching corpus: 2900, signal 140120/154747 (executing program) 2022/10/06 11:38:26 fetching corpus: 2950, signal 140699/155145 (executing program) 2022/10/06 11:38:26 fetching corpus: 3000, signal 141291/155553 (executing program) 2022/10/06 11:38:26 fetching corpus: 3050, signal 142320/156047 (executing program) 2022/10/06 11:38:26 fetching corpus: 3100, signal 143602/156595 (executing program) 2022/10/06 11:38:26 fetching corpus: 3150, signal 144586/156975 (executing program) 2022/10/06 11:38:26 fetching corpus: 3200, signal 146130/157430 (executing program) 2022/10/06 11:38:27 fetching corpus: 3250, signal 147394/157836 (executing program) 2022/10/06 11:38:27 fetching corpus: 3300, signal 148384/158139 (executing program) 2022/10/06 11:38:27 fetching corpus: 3350, signal 149445/158500 (executing program) 2022/10/06 11:38:27 fetching corpus: 3400, signal 149931/158684 (executing program) 2022/10/06 11:38:27 fetching corpus: 3450, signal 150654/158880 (executing program) 2022/10/06 11:38:27 fetching corpus: 3500, signal 151916/159169 (executing program) 2022/10/06 11:38:27 fetching corpus: 3550, signal 152436/159343 (executing program) 2022/10/06 11:38:27 fetching corpus: 3600, signal 153077/159490 (executing program) 2022/10/06 11:38:27 fetching corpus: 3650, signal 154086/159664 (executing program) 2022/10/06 11:38:27 fetching corpus: 3700, signal 154657/159791 (executing program) 2022/10/06 11:38:28 fetching corpus: 3750, signal 155264/159882 (executing program) 2022/10/06 11:38:28 fetching corpus: 3800, signal 155761/159963 (executing program) 2022/10/06 11:38:28 fetching corpus: 3850, signal 156437/160045 (executing program) 2022/10/06 11:38:28 fetching corpus: 3883, signal 156883/160104 (executing program) 2022/10/06 11:38:28 fetching corpus: 3883, signal 156883/160111 (executing program) 2022/10/06 11:38:28 fetching corpus: 3883, signal 156883/160111 (executing program) 2022/10/06 11:38:31 starting 8 fuzzer processes 11:38:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r0, 0xc0189436, &(0x7f0000000440)) 11:38:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x50, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0xfffffffffffffeeb, 0x4, @mcast1}}}]}]}, 0x50}}, 0x0) 11:38:31 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r0) 11:38:31 executing program 5: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x0, 0x411}}}, 0x7) [ 64.640951] audit: type=1400 audit(1665056311.292:6): avc: denied { execmem } for pid=291 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:38:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x4, 0x0, 0x0) 11:38:31 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$bt_l2cap(r0, 0x0, 0xd) 11:38:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:38:31 executing program 7: waitid(0x2, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000200), 0x1, &(0x7f0000000280)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) get_robust_list(r0, 0x0, &(0x7f0000000500)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000580)) getpgrp(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 65.932896] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.935607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.937079] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.942082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.949590] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.951239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.961496] Bluetooth: hci0: HCI_REQ-0x0c1a [ 65.981965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.987634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.989096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.992582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.994411] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.995866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.005285] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.030212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.054528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.059316] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.065027] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.066846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.068164] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.072954] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.083708] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.084621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.086630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.091620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.092716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.092824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.094850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.096107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.097920] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.100858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.105688] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.106826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.108108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.110129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.110230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.112606] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.112719] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.115624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.117324] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.119217] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.120405] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.122156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.126329] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.129075] Bluetooth: hci5: HCI_REQ-0x0c1a [ 66.129500] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.137633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.138960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.145286] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.158612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.162625] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.164158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.165303] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.166947] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.171427] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.177411] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.017807] Bluetooth: hci1: command 0x0409 tx timeout [ 68.018546] Bluetooth: hci0: command 0x0409 tx timeout [ 68.081522] Bluetooth: hci2: command 0x0409 tx timeout [ 68.144462] Bluetooth: hci5: command 0x0409 tx timeout [ 68.208792] Bluetooth: hci6: command 0x0409 tx timeout [ 68.209307] Bluetooth: hci4: command 0x0409 tx timeout [ 68.209825] Bluetooth: hci7: command 0x0409 tx timeout [ 68.210273] Bluetooth: hci3: command 0x0409 tx timeout [ 70.064494] Bluetooth: hci0: command 0x041b tx timeout [ 70.064941] Bluetooth: hci1: command 0x041b tx timeout [ 70.128394] Bluetooth: hci2: command 0x041b tx timeout [ 70.192421] Bluetooth: hci5: command 0x041b tx timeout [ 70.256490] Bluetooth: hci3: command 0x041b tx timeout [ 70.256939] Bluetooth: hci7: command 0x041b tx timeout [ 70.257311] Bluetooth: hci4: command 0x041b tx timeout [ 70.257713] Bluetooth: hci6: command 0x041b tx timeout [ 72.112454] Bluetooth: hci1: command 0x040f tx timeout [ 72.112905] Bluetooth: hci0: command 0x040f tx timeout [ 72.176404] Bluetooth: hci2: command 0x040f tx timeout [ 72.240480] Bluetooth: hci5: command 0x040f tx timeout [ 72.304493] Bluetooth: hci6: command 0x040f tx timeout [ 72.304945] Bluetooth: hci4: command 0x040f tx timeout [ 72.305320] Bluetooth: hci7: command 0x040f tx timeout [ 72.305730] Bluetooth: hci3: command 0x040f tx timeout [ 74.160936] Bluetooth: hci0: command 0x0419 tx timeout [ 74.161393] Bluetooth: hci1: command 0x0419 tx timeout [ 74.224443] Bluetooth: hci2: command 0x0419 tx timeout [ 74.288435] Bluetooth: hci5: command 0x0419 tx timeout [ 74.352420] Bluetooth: hci3: command 0x0419 tx timeout [ 74.352839] Bluetooth: hci7: command 0x0419 tx timeout [ 74.353186] Bluetooth: hci4: command 0x0419 tx timeout [ 74.353581] Bluetooth: hci6: command 0x0419 tx timeout [ 117.740387] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.741110] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.277608] audit: type=1400 audit(1665056365.928:7): avc: denied { open } for pid=3933 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.279010] audit: type=1400 audit(1665056365.929:8): avc: denied { kernel } for pid=3933 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.296030] ------------[ cut here ]------------ [ 119.296049] [ 119.296051] ====================================================== [ 119.296055] WARNING: possible circular locking dependency detected [ 119.296059] 6.0.0-next-20221006 #1 Not tainted [ 119.296065] ------------------------------------------------------ [ 119.296068] syz-executor.6/3934 is trying to acquire lock: [ 119.296075] ffffffff853fac98 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 119.296117] [ 119.296117] but task is already holding lock: [ 119.296121] ffff88800f23d420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.296159] [ 119.296159] which lock already depends on the new lock. [ 119.296159] [ 119.296163] [ 119.296163] the existing dependency chain (in reverse order) is: [ 119.296167] [ 119.296167] -> #3 (&ctx->lock){....}-{2:2}: [ 119.296182] _raw_spin_lock+0x2a/0x40 [ 119.296195] __perf_event_task_sched_out+0x53b/0x18d0 [ 119.296206] __schedule+0xedd/0x2470 [ 119.296222] schedule+0xda/0x1b0 [ 119.296237] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.296249] syscall_exit_to_user_mode+0x19/0x40 [ 119.296263] do_syscall_64+0x48/0x90 [ 119.296274] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.296288] [ 119.296288] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 119.296301] _raw_spin_lock_nested+0x30/0x40 [ 119.296313] raw_spin_rq_lock_nested+0x1e/0x30 [ 119.296327] task_fork_fair+0x63/0x4d0 [ 119.296346] sched_cgroup_fork+0x3d0/0x540 [ 119.296360] copy_process+0x4183/0x6e20 [ 119.296372] kernel_clone+0xe7/0x890 [ 119.296381] user_mode_thread+0xad/0xf0 [ 119.296392] rest_init+0x24/0x250 [ 119.296404] arch_call_rest_init+0xf/0x14 [ 119.296417] start_kernel+0x4c6/0x4eb [ 119.296426] secondary_startup_64_no_verify+0xe0/0xeb [ 119.296441] [ 119.296441] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 119.296454] _raw_spin_lock_irqsave+0x39/0x60 [ 119.296466] try_to_wake_up+0xab/0x1930 [ 119.296479] up+0x75/0xb0 [ 119.296495] __up_console_sem+0x6e/0x80 [ 119.296511] console_unlock+0x46a/0x590 [ 119.296527] vprintk_emit+0x1bd/0x560 [ 119.296543] vprintk+0x84/0xa0 [ 119.296559] _printk+0xba/0xf1 [ 119.296572] kauditd_hold_skb.cold+0x3f/0x4e [ 119.296590] kauditd_send_queue+0x233/0x290 [ 119.296605] kauditd_thread+0x5f9/0x9c0 [ 119.296619] kthread+0x2ed/0x3a0 [ 119.296636] ret_from_fork+0x22/0x30 [ 119.296648] [ 119.296648] -> #0 ((console_sem).lock){....}-{2:2}: [ 119.296662] __lock_acquire+0x2a02/0x5e70 [ 119.296679] lock_acquire+0x1a2/0x530 [ 119.296695] _raw_spin_lock_irqsave+0x39/0x60 [ 119.296706] down_trylock+0xe/0x70 [ 119.296723] __down_trylock_console_sem+0x3b/0xd0 [ 119.296739] vprintk_emit+0x16b/0x560 [ 119.296754] vprintk+0x84/0xa0 [ 119.296770] _printk+0xba/0xf1 [ 119.296781] report_bug.cold+0x72/0xab [ 119.296791] handle_bug+0x3c/0x70 [ 119.296800] exc_invalid_op+0x14/0x50 [ 119.296810] asm_exc_invalid_op+0x16/0x20 [ 119.296824] group_sched_out.part.0+0x2c7/0x460 [ 119.296842] ctx_sched_out+0x8f1/0xc10 [ 119.296858] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.296869] __schedule+0xedd/0x2470 [ 119.296884] schedule+0xda/0x1b0 [ 119.296898] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.296909] syscall_exit_to_user_mode+0x19/0x40 [ 119.296923] do_syscall_64+0x48/0x90 [ 119.296933] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.296946] [ 119.296946] other info that might help us debug this: [ 119.296946] [ 119.296949] Chain exists of: [ 119.296949] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 119.296949] [ 119.296964] Possible unsafe locking scenario: [ 119.296964] [ 119.296967] CPU0 CPU1 [ 119.296969] ---- ---- [ 119.296971] lock(&ctx->lock); [ 119.296977] lock(&rq->__lock); [ 119.296984] lock(&ctx->lock); [ 119.296990] lock((console_sem).lock); [ 119.296995] [ 119.296995] *** DEADLOCK *** [ 119.296995] [ 119.296997] 2 locks held by syz-executor.6/3934: [ 119.297004] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 119.297035] #1: ffff88800f23d420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.297061] [ 119.297061] stack backtrace: [ 119.297064] CPU: 1 PID: 3934 Comm: syz-executor.6 Not tainted 6.0.0-next-20221006 #1 [ 119.297076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.297083] Call Trace: [ 119.297086] [ 119.297091] dump_stack_lvl+0x8b/0xb3 [ 119.297102] check_noncircular+0x263/0x2e0 [ 119.297119] ? format_decode+0x26c/0xb50 [ 119.297136] ? print_circular_bug+0x450/0x450 [ 119.297153] ? simple_strtoul+0x30/0x30 [ 119.297170] ? format_decode+0x26c/0xb50 [ 119.297188] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 119.297206] __lock_acquire+0x2a02/0x5e70 [ 119.297227] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 119.297249] lock_acquire+0x1a2/0x530 [ 119.297266] ? down_trylock+0xe/0x70 [ 119.297284] ? lock_release+0x750/0x750 [ 119.297304] ? vprintk+0x84/0xa0 [ 119.297322] _raw_spin_lock_irqsave+0x39/0x60 [ 119.297335] ? down_trylock+0xe/0x70 [ 119.297352] down_trylock+0xe/0x70 [ 119.297369] ? vprintk+0x84/0xa0 [ 119.297386] __down_trylock_console_sem+0x3b/0xd0 [ 119.297403] vprintk_emit+0x16b/0x560 [ 119.297421] vprintk+0x84/0xa0 [ 119.297439] _printk+0xba/0xf1 [ 119.297451] ? record_print_text.cold+0x16/0x16 [ 119.297468] ? report_bug.cold+0x66/0xab [ 119.297479] ? group_sched_out.part.0+0x2c7/0x460 [ 119.297497] report_bug.cold+0x72/0xab [ 119.297509] handle_bug+0x3c/0x70 [ 119.297520] exc_invalid_op+0x14/0x50 [ 119.297531] asm_exc_invalid_op+0x16/0x20 [ 119.297545] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.297566] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.297577] RSP: 0018:ffff8880400e7c48 EFLAGS: 00010006 [ 119.297586] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.297594] RDX: ffff88801e7c8000 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 119.297601] RBP: ffff8880400d0000 R08: 0000000000000005 R09: 0000000000000001 [ 119.297609] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800f23d400 [ 119.297617] R13: ffff88806cf3d2c0 R14: ffffffff8547d200 R15: 0000000000000002 [ 119.297628] ? group_sched_out.part.0+0x2c7/0x460 [ 119.297648] ? group_sched_out.part.0+0x2c7/0x460 [ 119.297667] ctx_sched_out+0x8f1/0xc10 [ 119.297687] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.297701] ? lock_is_held_type+0xd7/0x130 [ 119.297716] ? __perf_cgroup_move+0x160/0x160 [ 119.297727] ? set_next_entity+0x304/0x550 [ 119.297744] ? update_curr+0x267/0x740 [ 119.297762] ? lock_is_held_type+0xd7/0x130 [ 119.297778] __schedule+0xedd/0x2470 [ 119.297796] ? io_schedule_timeout+0x150/0x150 [ 119.297814] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.297834] schedule+0xda/0x1b0 [ 119.297851] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.297863] syscall_exit_to_user_mode+0x19/0x40 [ 119.297877] do_syscall_64+0x48/0x90 [ 119.297888] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.297903] RIP: 0033:0x7f7716b14b19 [ 119.297911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.297922] RSP: 002b:00007f771408a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.297933] RAX: 0000000000000001 RBX: 00007f7716c27f68 RCX: 00007f7716b14b19 [ 119.297940] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7716c27f6c [ 119.297948] RBP: 00007f7716c27f60 R08: 000000000000000e R09: 0000000000000000 [ 119.297955] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7716c27f6c [ 119.297962] R13: 00007ffd53325caf R14: 00007f771408a300 R15: 0000000000022000 [ 119.297974] [ 119.350511] WARNING: CPU: 1 PID: 3934 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 119.351177] Modules linked in: [ 119.351407] CPU: 1 PID: 3934 Comm: syz-executor.6 Not tainted 6.0.0-next-20221006 #1 [ 119.351961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.352543] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.352944] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.354206] RSP: 0018:ffff8880400e7c48 EFLAGS: 00010006 [ 119.354586] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.355094] RDX: ffff88801e7c8000 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 119.355589] RBP: ffff8880400d0000 R08: 0000000000000005 R09: 0000000000000001 [ 119.356091] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800f23d400 [ 119.356596] R13: ffff88806cf3d2c0 R14: ffffffff8547d200 R15: 0000000000000002 [ 119.357101] FS: 00007f771408a700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 119.357673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.358083] CR2: 00007fd293e7c6f4 CR3: 000000000f896000 CR4: 0000000000350ee0 [ 119.358587] Call Trace: [ 119.358769] [ 119.358931] ctx_sched_out+0x8f1/0xc10 [ 119.359216] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.359590] ? lock_is_held_type+0xd7/0x130 [ 119.359903] ? __perf_cgroup_move+0x160/0x160 [ 119.360226] ? set_next_entity+0x304/0x550 [ 119.360542] ? update_curr+0x267/0x740 [ 119.360826] ? lock_is_held_type+0xd7/0x130 [ 119.361139] __schedule+0xedd/0x2470 [ 119.361414] ? io_schedule_timeout+0x150/0x150 [ 119.361755] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.362115] schedule+0xda/0x1b0 [ 119.362369] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.362722] syscall_exit_to_user_mode+0x19/0x40 [ 119.363064] do_syscall_64+0x48/0x90 [ 119.363328] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.363697] RIP: 0033:0x7f7716b14b19 [ 119.363967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.365245] RSP: 002b:00007f771408a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.365771] RAX: 0000000000000001 RBX: 00007f7716c27f68 RCX: 00007f7716b14b19 [ 119.366271] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7716c27f6c [ 119.366776] RBP: 00007f7716c27f60 R08: 000000000000000e R09: 0000000000000000 [ 119.367271] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7716c27f6c [ 119.367769] R13: 00007ffd53325caf R14: 00007f771408a300 R15: 0000000000022000 [ 119.368291] [ 119.368461] irq event stamp: 2624 [ 119.368702] hardirqs last enabled at (2623): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 119.369353] hardirqs last disabled at (2624): [] __schedule+0x1225/0x2470 [ 119.369951] softirqs last enabled at (2476): [] __irq_exit_rcu+0x11b/0x180 [ 119.370570] softirqs last disabled at (2461): [] __irq_exit_rcu+0x11b/0x180 [ 119.371185] ---[ end trace 0000000000000000 ]--- [ 119.503361] hrtimer: interrupt took 28733 ns 11:39:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r0, 0xc0189436, &(0x7f0000000440)) 11:39:26 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback}, 0x2, @in=@loopback}}, 0xe8) 11:39:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000640)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "a65de43419eeececf396ca588ca560c1"}}}, 0x16) 11:39:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x4, 0x0, 0x0) 11:39:26 executing program 5: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x2c008000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r3 = getpgid(0xffffffffffffffff) r4 = fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x4, 0x80, 0x1f, 0x0, 0x40, 0x208, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x40000, 0x2, 0x1, 0x6, 0xfffffffffffffffe, 0x8, 0x7, 0x0, 0x3, 0x0, 0x1f}, r3, 0x5, r4, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000780), &(0x7f00000007c0)=0x4) fallocate(r5, 0x8, 0x2, 0xfffffffffffffffe) fsmount(r2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a5eb4057be", @ANYRES16=r6, @ANYBLOB="856c00000000000000000c000000080001000100000008000300", @ANYRES32=r7, @ANYBLOB="42ee238162b6c8bc3a8dcad42617866a76c855722068c1513a1e88e767a7f7b4f0c895b7"], 0x24}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) 11:39:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x4, 0x0, 0x0) 11:39:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000640)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "a65de43419eeececf396ca588ca560c1"}}}, 0x16) 11:39:26 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r0, 0xc0189436, &(0x7f0000000440)) 11:39:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r0, 0xc0189436, &(0x7f0000000440)) 11:39:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x4, 0x0, 0x0) 11:39:26 executing program 5: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x2c008000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r3 = getpgid(0xffffffffffffffff) r4 = fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x4, 0x80, 0x1f, 0x0, 0x40, 0x208, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x40000, 0x2, 0x1, 0x6, 0xfffffffffffffffe, 0x8, 0x7, 0x0, 0x3, 0x0, 0x1f}, r3, 0x5, r4, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000780), &(0x7f00000007c0)=0x4) fallocate(r5, 0x8, 0x2, 0xfffffffffffffffe) fsmount(r2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a5eb4057be", @ANYRES16=r6, @ANYBLOB="856c00000000000000000c000000080001000100000008000300", @ANYRES32=r7, @ANYBLOB="42ee238162b6c8bc3a8dcad42617866a76c855722068c1513a1e88e767a7f7b4f0c895b7"], 0x24}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) 11:39:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000640)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "a65de43419eeececf396ca588ca560c1"}}}, 0x16) 11:39:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r0, 0xc0189436, &(0x7f0000000440)) 11:39:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:26 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r0, 0xc0189436, &(0x7f0000000440)) 11:39:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000640)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "a65de43419eeececf396ca588ca560c1"}}}, 0x16) 11:39:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:26 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r0, 0xc0189436, &(0x7f0000000440)) 11:39:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:27 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(0x0) 11:39:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000040)) 11:39:27 executing program 5: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x2c008000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r3 = getpgid(0xffffffffffffffff) r4 = fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x4, 0x80, 0x1f, 0x0, 0x40, 0x208, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x40000, 0x2, 0x1, 0x6, 0xfffffffffffffffe, 0x8, 0x7, 0x0, 0x3, 0x0, 0x1f}, r3, 0x5, r4, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000780), &(0x7f00000007c0)=0x4) fallocate(r5, 0x8, 0x2, 0xfffffffffffffffe) fsmount(r2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a5eb4057be", @ANYRES16=r6, @ANYBLOB="856c00000000000000000c000000080001000100000008000300", @ANYRES32=r7, @ANYBLOB="42ee238162b6c8bc3a8dcad42617866a76c855722068c1513a1e88e767a7f7b4f0c895b7"], 0x24}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) 11:39:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x2e, 0x0, "f7d04262134a2cbf4912ef55dc5afd8c4e511c85c706282f82787bd1bf7e5d03175b81b4890a70975c49d9cc16e758d9ace84cf783f411b8188f71244d7d5fb18ef329ae5c5b5a6efe8d0846b1c3bd20"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "8fcf37e83856fa6b4f208edebad177093eb0bca98099ec47386a6063f1ddb9f48fafedb7ea3e381106d7b1e4f1a38c361b3146c3f222a763f9fbb240b192309012da6ecff1e5db9f4ecc20c137a8efa8"}, 0xf0) 11:39:27 executing program 4: ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) 11:39:27 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:39:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:27 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_alloc(0x0, 0x0) 11:39:27 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) 11:39:27 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:39:27 executing program 6: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:39:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x2e, 0x0, "f7d04262134a2cbf4912ef55dc5afd8c4e511c85c706282f82787bd1bf7e5d03175b81b4890a70975c49d9cc16e758d9ace84cf783f411b8188f71244d7d5fb18ef329ae5c5b5a6efe8d0846b1c3bd20"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "8fcf37e83856fa6b4f208edebad177093eb0bca98099ec47386a6063f1ddb9f48fafedb7ea3e381106d7b1e4f1a38c361b3146c3f222a763f9fbb240b192309012da6ecff1e5db9f4ecc20c137a8efa8"}, 0xf0) 11:39:27 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:39:27 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_alloc(0x0, 0x0) 11:39:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:27 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_alloc(0x0, 0x0) 11:39:27 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:39:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x2e, 0x0, "f7d04262134a2cbf4912ef55dc5afd8c4e511c85c706282f82787bd1bf7e5d03175b81b4890a70975c49d9cc16e758d9ace84cf783f411b8188f71244d7d5fb18ef329ae5c5b5a6efe8d0846b1c3bd20"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "8fcf37e83856fa6b4f208edebad177093eb0bca98099ec47386a6063f1ddb9f48fafedb7ea3e381106d7b1e4f1a38c361b3146c3f222a763f9fbb240b192309012da6ecff1e5db9f4ecc20c137a8efa8"}, 0xf0) 11:39:27 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_alloc(0x0, 0x0) 11:39:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)) getresgid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x54, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x1a}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x9, 0x0) 11:39:27 executing program 5: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x2c008000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r3 = getpgid(0xffffffffffffffff) r4 = fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x4, 0x80, 0x1f, 0x0, 0x40, 0x208, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x40000, 0x2, 0x1, 0x6, 0xfffffffffffffffe, 0x8, 0x7, 0x0, 0x3, 0x0, 0x1f}, r3, 0x5, r4, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000780), &(0x7f00000007c0)=0x4) fallocate(r5, 0x8, 0x2, 0xfffffffffffffffe) fsmount(r2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a5eb4057be", @ANYRES16=r6, @ANYBLOB="856c00000000000000000c000000080001000100000008000300", @ANYRES32=r7, @ANYBLOB="42ee238162b6c8bc3a8dcad42617866a76c855722068c1513a1e88e767a7f7b4f0c895b7"], 0x24}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) 11:39:27 executing program 6: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:39:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00./file1']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1f, 0xec, 0x1, 0x0, 0x4, 0xa0053, 0x11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x800, 0xffffff84, 0x0, 0xed2, 0x101, 0x1, 0x0, 0x0, 0x0, 0x6287}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000240)={0x0, 0x0, 0xa}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r3, 0xb, 0x200, 0x101) 11:39:27 executing program 1: msgctl$MSG_INFO(0xffffffffffffffff, 0xc, 0x0) [ 121.047940] autofs4:pid:4066:validate_dev_ioctl: path string terminator missing for cmd(0xc0189376) [ 121.066238] autofs4:pid:4066:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1768304430.3237228), cmd(0xc0189376) [ 121.067103] autofs4:pid:4066:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189376) 11:39:27 executing program 7: remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x0, 0x0) 11:39:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2) 11:39:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)) getresgid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x54, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x1a}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x9, 0x0) 11:39:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x2e, 0x0, "f7d04262134a2cbf4912ef55dc5afd8c4e511c85c706282f82787bd1bf7e5d03175b81b4890a70975c49d9cc16e758d9ace84cf783f411b8188f71244d7d5fb18ef329ae5c5b5a6efe8d0846b1c3bd20"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "8fcf37e83856fa6b4f208edebad177093eb0bca98099ec47386a6063f1ddb9f48fafedb7ea3e381106d7b1e4f1a38c361b3146c3f222a763f9fbb240b192309012da6ecff1e5db9f4ecc20c137a8efa8"}, 0xf0) 11:39:27 executing program 6: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:39:27 executing program 0: socket$inet6(0xa, 0x0, 0x9fc4) [ 121.185865] mmap: syz-executor.7 (4077) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 11:39:27 executing program 7: prctl$PR_SET_TIMERSLACK(0x1d, 0x0) [ 121.266472] autofs4:pid:4082:validate_dev_ioctl: path string terminator missing for cmd(0xc0189376) 11:39:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2) 11:39:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)) getresgid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x54, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x1a}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x9, 0x0) 11:39:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r0, 0x0, 0x0) 11:39:27 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 11:39:28 executing program 3: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_io_uring_setup(0x71e2, &(0x7f0000000000), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), 0x0) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 11:39:28 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2) 11:39:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xbf1cadf27cf12961) setresuid(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3, 0x18, 0x0) write(r0, &(0x7f0000000080)="01", 0x1) 11:39:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pread64(r0, &(0x7f0000000040)=""/188, 0xbc, 0x400000000000000) 11:39:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000080)='-', 0x1) [ 121.397784] autofs4:pid:4104:validate_dev_ioctl: path string terminator missing for cmd(0xc0189376) 11:39:28 executing program 5: rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) 11:39:28 executing program 0: syz_open_dev$vcsn(&(0x7f0000001880), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000009480), &(0x7f00000094c0)='./file0\x00', 0x7fffffff, 0x1, &(0x7f000000a500)=[{&(0x7f0000009500)="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", 0x400, 0xffff}], 0x800000, &(0x7f000000a540)={[{@dots}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x800}}], [{@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0xddae}}]}) [ 121.423718] loop0: detected capacity change from 0 to 264192 [ 121.425581] FAT-fs (loop0): Unrecognized mount option "dont_hash" or missing value 11:39:28 executing program 0: syz_open_dev$vcsn(&(0x7f0000001880), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000009480), &(0x7f00000094c0)='./file0\x00', 0x7fffffff, 0x1, &(0x7f000000a500)=[{&(0x7f0000009500)="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", 0x400, 0xffff}], 0x800000, &(0x7f000000a540)={[{@dots}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x800}}], [{@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0xddae}}]}) 11:39:28 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2) 11:39:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)) getresgid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x54, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x1a}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x9, 0x0) [ 121.485663] loop0: detected capacity change from 0 to 264192 11:39:28 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x89e0, 0x0) 11:39:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xbf1cadf27cf12961) setresuid(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3, 0x18, 0x0) write(r0, &(0x7f0000000080)="01", 0x1) 11:39:28 executing program 7: syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}}, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) [ 121.498761] FAT-fs (loop0): Unrecognized mount option "dont_hash" or missing value 11:39:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xbf1cadf27cf12961) setresuid(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3, 0x18, 0x0) write(r0, &(0x7f0000000080)="01", 0x1) 11:39:28 executing program 5: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:39:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xbf1cadf27cf12961) setresuid(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3, 0x18, 0x0) write(r0, &(0x7f0000000080)="01", 0x1) 11:39:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xbf1cadf27cf12961) setresuid(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3, 0x18, 0x0) write(r0, &(0x7f0000000080)="01", 0x1) 11:39:28 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) 11:39:28 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/bus/pnp', 0x600, 0x0) [ 121.591570] autofs4:pid:4130:validate_dev_ioctl: path string terminator missing for cmd(0xc0189376) 11:39:28 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000300)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba', 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 11:39:28 executing program 0: syz_open_dev$vcsn(&(0x7f0000001880), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000009480), &(0x7f00000094c0)='./file0\x00', 0x7fffffff, 0x1, &(0x7f000000a500)=[{&(0x7f0000009500)="9084cc3f77bed7204ca7a8e59cf2a37774c98215bb91f15d40ed6ab544e0f215f88435a25546a467a97e689d462d7651f2ac5cc9ff154d92d02b1fc1e160b2ead0b40b7bc92035850c61e5ad3ff27ff689e39a02c703b709399d1230077dbbaef62b9e13406e35d1b578e1eb32b4a7a342548a471254231f78e79df7a00cc41d775652100a133693b9f273abfa1d094747aae978bde1f8bd5e89ef49454be682c29cb6eb58bd567b683ee769293bc0a6aa1eb4d9f8ac7736617b8c7e1784e8921501f568ae8384f2f9b91d07ef5bee91f890cc739b78d13d6c2e8acce003be12e454f0de28578ddf43e2d882256c5106f1d24b0e4ab7d2145aebabf392dfc27ab8e51197adddb1a5c3f301c990879b76e1f96c38bef001a10f85b7f8dda56cac28ba12256e46c1f310296bc9be75fea65630dd9c72fa3ddf5b06b5bce06e4aa23cfb9484834c2395c4ec9ccda0b054f01335e895d6f28f61c41f40ce324e808a88f181025ce2cf3579666d77109d8558bc4a9926b2f7140b79e5eef98f35d1adf3fe5020022571b0779dc6a3269d8886a6a5bba3f142ef95a0e09da71781b975d078330d8274d9ed54f98d4416cfceb10fe3b41db0863312de1d4bdaf4bfffb8382aecb33ddb8d19df6cab87a4a1fd85f47f065062717528f1498f56f8706086e0b321564a94b03ecdee9dbb8ee87e99f1ca584f89419a36b7fdf503bdf12c3f38b762ca314f841e4b33303ddff1bd1ccdc91aeba9efb22f98c94ab33aeb2edbe209602ec273c3df20cf1bee31920ee4c48425cfe26a62029fe6afc979b68a3665e57b68f80e778fcded6b770e4873f3c5ab387921654278eb8a8f1cd21b70e475df755f53ad12db096d05dcc0d5c6f5530a063c944d3f1022e41cb15802b27edcf1edef6c575ebe8ae18234270686c45950c8503550b742dc975ea803d987583ab12085c327c7fbf7858edc9a977743596a7afa113a7e138b672a95c1d17ec4ddaef6f58ce558e88bc0087d8f9c62420dc272fe0760fb05007d634b9469be75dc468f116499042e1b64f58a7402b8a730ca2cde3842510fc8bd38e307746b4035a8b5b10cdfbc03749e661e3e7e98d75eed905b77a986e59ad8b247c1c784d31dc331c96e2de1abe9b6d1390f297c276baf7dfca793b02f0eab9cfbf2f0a5f238b4624e27704aa5e47768d536cabd7b08b1f3c620cb23d17b78e0fd57d0c22cd9d742e657d20b056cec5420a36d9152dee2183350554f2161c066e2812d81efaf65307582564150398eaddb2756a809aeb98d5fe9a936bac43f9d63a271a8c3bfedd44b9c59e57c2f7864ff5857c99a8e2247f77752888c1a3753c02b1a21ff35da6dd7dce06ff87af8de3a32462a3a0e76d5a9eca1f1d1ce79ba97b3614956415de27423791072a3c6208ae91cef641a97e98153532ea40fb90c0c0b2e7889", 0x400, 0xffff}], 0x800000, &(0x7f000000a540)={[{@dots}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x800}}], [{@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0xddae}}]}) 11:39:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xbf1cadf27cf12961) setresuid(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3, 0x18, 0x0) write(r0, &(0x7f0000000080)="01", 0x1) 11:39:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) [ 121.673609] loop0: detected capacity change from 0 to 264192 [ 121.675491] FAT-fs (loop0): Unrecognized mount option "dont_hash" or missing value 11:39:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da69ccc9bf72e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e14ff7510f3e6da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295fe1a4fc3cb1b1fa5aafc75b6", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 11:39:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000500)) 11:39:28 executing program 0: syz_open_dev$vcsn(&(0x7f0000001880), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000009480), &(0x7f00000094c0)='./file0\x00', 0x7fffffff, 0x1, &(0x7f000000a500)=[{&(0x7f0000009500)="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", 0x400, 0xffff}], 0x800000, &(0x7f000000a540)={[{@dots}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x800}}], [{@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0xddae}}]}) 11:39:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xbf1cadf27cf12961) setresuid(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3, 0x18, 0x0) write(r0, &(0x7f0000000080)="01", 0x1) 11:39:28 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/248, 0xf8}, 0x3}], 0x1, 0x2040, &(0x7f0000001640)={0x0, 0x3938700}) 11:39:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) 11:39:28 executing program 7: syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) 11:39:28 executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 121.777553] loop0: detected capacity change from 0 to 264192 [ 121.778648] FAT-fs (loop0): Unrecognized mount option "dont_hash" or missing value 11:39:28 executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 11:39:28 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/248, 0xf8}, 0x3}], 0x1, 0x2040, &(0x7f0000001640)={0x0, 0x3938700}) 11:39:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280), 0x4) 11:39:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) 11:39:28 executing program 7: syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) 11:39:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da69ccc9bf72e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e14ff7510f3e6da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295fe1a4fc3cb1b1fa5aafc75b6", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 11:39:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da69ccc9bf72e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e14ff7510f3e6da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295fe1a4fc3cb1b1fa5aafc75b6", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 11:39:28 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/248, 0xf8}, 0x3}], 0x1, 0x2040, &(0x7f0000001640)={0x0, 0x3938700}) 11:39:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) 11:39:28 executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 11:39:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da69ccc9bf72e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e14ff7510f3e6da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295fe1a4fc3cb1b1fa5aafc75b6", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 11:39:28 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) poll(&(0x7f0000000c40)=[{r0}], 0x1, 0xe) 11:39:28 executing program 2: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x16, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 11:39:28 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/248, 0xf8}, 0x3}], 0x1, 0x2040, &(0x7f0000001640)={0x0, 0x3938700}) 11:39:28 executing program 7: syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) 11:39:28 executing program 1: syz_open_dev$sg(&(0x7f0000000840), 0x0, 0x2e000) 11:39:28 executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 11:39:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000007e80)={&(0x7f0000006540)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000006bc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5cb8}}], 0x18}, 0x0) 11:39:28 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) poll(&(0x7f0000000c40)=[{r0}], 0x1, 0xe) 11:39:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da69ccc9bf72e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e14ff7510f3e6da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295fe1a4fc3cb1b1fa5aafc75b6", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 11:39:28 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x3b8}], 0x1) 11:39:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da69ccc9bf72e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e14ff7510f3e6da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295fe1a4fc3cb1b1fa5aafc75b6", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 11:39:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:39:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x21, 0x0, 0x0) 11:39:28 executing program 1: syz_open_dev$sg(&(0x7f0000000840), 0x0, 0x2e000) 11:39:28 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) poll(&(0x7f0000000c40)=[{r0}], 0x1, 0xe) 11:39:28 executing program 7: syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) 11:39:28 executing program 1: syz_open_dev$sg(&(0x7f0000000840), 0x0, 0x2e000) 11:39:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x21, 0x0, 0x0) 11:39:28 executing program 4: getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r0, 0xffffffffffffffff) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) setresgid(r0, 0x0, r0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/106, 0x6a}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x103) sync() clone3(&(0x7f0000002680)={0x4008000, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500), {0x36}, &(0x7f0000002540)=""/171, 0xab, &(0x7f0000002600), &(0x7f0000002640)=[0x0], 0x1}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fork() openat$autofs(0xffffffffffffff9c, &(0x7f0000002a40), 0x40, 0x0) 11:39:28 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) poll(&(0x7f0000000c40)=[{r0}], 0x1, 0xe) 11:39:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da69ccc9bf72e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e14ff7510f3e6da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295fe1a4fc3cb1b1fa5aafc75b6", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 11:39:29 executing program 1: syz_open_dev$sg(&(0x7f0000000840), 0x0, 0x2e000) 11:39:29 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x3b8}], 0x1) 11:39:29 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), 0xffffffffffffffff) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xaa4, &(0x7f0000001480), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) 11:39:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x21, 0x0, 0x0) 11:39:29 executing program 4: getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r0, 0xffffffffffffffff) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) setresgid(r0, 0x0, r0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/106, 0x6a}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x103) sync() clone3(&(0x7f0000002680)={0x4008000, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500), {0x36}, &(0x7f0000002540)=""/171, 0xab, &(0x7f0000002600), &(0x7f0000002640)=[0x0], 0x1}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fork() openat$autofs(0xffffffffffffff9c, &(0x7f0000002a40), 0x40, 0x0) 11:39:29 executing program 6: getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r0, 0xffffffffffffffff) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) setresgid(r0, 0x0, r0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/106, 0x6a}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x103) sync() clone3(&(0x7f0000002680)={0x4008000, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500), {0x36}, &(0x7f0000002540)=""/171, 0xab, &(0x7f0000002600), &(0x7f0000002640)=[0x0], 0x1}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fork() openat$autofs(0xffffffffffffff9c, &(0x7f0000002a40), 0x40, 0x0) 11:39:29 executing program 1: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x77359400}, &(0x7f0000000740)={&(0x7f0000000700)={[0xffffffffffff712b]}, 0x8}) 11:39:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x1f, &(0x7f0000000000)="28a5f6eb", 0x4) 11:39:29 executing program 3: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:39:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @binary="d8c931"}]}, 0x18}], 0x1}, 0x0) 11:39:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x21, 0x0, 0x0) 11:39:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x1f, &(0x7f0000000000)="28a5f6eb", 0x4) 11:39:29 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), 0xffffffffffffffff) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xaa4, &(0x7f0000001480), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) 11:39:29 executing program 6: getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r0, 0xffffffffffffffff) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) setresgid(r0, 0x0, r0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/106, 0x6a}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x103) sync() clone3(&(0x7f0000002680)={0x4008000, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500), {0x36}, &(0x7f0000002540)=""/171, 0xab, &(0x7f0000002600), &(0x7f0000002640)=[0x0], 0x1}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fork() openat$autofs(0xffffffffffffff9c, &(0x7f0000002a40), 0x40, 0x0) 11:39:29 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), 0xffffffffffffffff) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xaa4, &(0x7f0000001480), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) 11:39:29 executing program 4: getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r0, 0xffffffffffffffff) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) setresgid(r0, 0x0, r0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/106, 0x6a}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x103) sync() clone3(&(0x7f0000002680)={0x4008000, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500), {0x36}, &(0x7f0000002540)=""/171, 0xab, &(0x7f0000002600), &(0x7f0000002640)=[0x0], 0x1}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fork() openat$autofs(0xffffffffffffff9c, &(0x7f0000002a40), 0x40, 0x0) 11:39:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @binary="d8c931"}]}, 0x18}], 0x1}, 0x0) 11:39:29 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x3b8}], 0x1) 11:39:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x1f, &(0x7f0000000000)="28a5f6eb", 0x4) 11:39:29 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), 0xffffffffffffffff) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xaa4, &(0x7f0000001480), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) 11:39:29 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000005b40), 0x0, 0x0) 11:39:29 executing program 6: getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r0, 0xffffffffffffffff) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) setresgid(r0, 0x0, r0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/106, 0x6a}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x103) sync() clone3(&(0x7f0000002680)={0x4008000, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500), {0x36}, &(0x7f0000002540)=""/171, 0xab, &(0x7f0000002600), &(0x7f0000002640)=[0x0], 0x1}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fork() openat$autofs(0xffffffffffffff9c, &(0x7f0000002a40), 0x40, 0x0) 11:39:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x1f, &(0x7f0000000000)="28a5f6eb", 0x4) 11:39:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @binary="d8c931"}]}, 0x18}], 0x1}, 0x0) 11:39:29 executing program 2: getpriority(0x1, 0x0) 11:39:30 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x3b8}], 0x1) [ 123.440430] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 123.441602] Bluetooth: hci2: Injecting HCI hardware error event [ 123.442519] Bluetooth: hci2: hardware error 0x00 11:39:30 executing program 7: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) 11:39:30 executing program 2: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:39:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @binary="d8c931"}]}, 0x18}], 0x1}, 0x0) 11:39:30 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), 0xffffffffffffffff) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xaa4, &(0x7f0000001480), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) 11:39:30 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), 0xffffffffffffffff) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xaa4, &(0x7f0000001480), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) 11:39:30 executing program 4: getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r0, 0xffffffffffffffff) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) setresgid(r0, 0x0, r0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/106, 0x6a}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x103) sync() clone3(&(0x7f0000002680)={0x4008000, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500), {0x36}, &(0x7f0000002540)=""/171, 0xab, &(0x7f0000002600), &(0x7f0000002640)=[0x0], 0x1}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fork() openat$autofs(0xffffffffffffff9c, &(0x7f0000002a40), 0x40, 0x0) 11:39:30 executing program 2: r0 = io_uring_setup(0x2be0, &(0x7f0000000a00)={0x0, 0x44b4}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ac0)=""/200, 0xc8}, {&(0x7f0000000bc0)}], 0x2) 11:39:30 executing program 7: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) 11:39:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x0) 11:39:30 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), 0xffffffffffffffff) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xaa4, &(0x7f0000001480), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) 11:39:30 executing program 6: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') 11:39:30 executing program 1: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) 11:39:30 executing program 2: timer_settime(0x0, 0x0, 0x0, 0x0) 11:39:30 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x40505331, &(0x7f0000000040)={0xb3, @time}) 11:39:30 executing program 7: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) 11:39:30 executing program 1: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) 11:39:30 executing program 2: r0 = syz_io_uring_setup(0x771e, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600), 0x0) 11:39:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) 11:39:30 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 11:39:30 executing program 1: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) 11:39:30 executing program 7: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) 11:39:30 executing program 2: syz_mount_image$vfat(&(0x7f0000008700), &(0x7f0000008740)='./file0\x00', 0x0, 0x0, &(0x7f0000008c80), 0x0, &(0x7f0000008d40)) 11:39:30 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dd02a6", 0x2, 0x11, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 11:39:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, '\x00', [{}, {0x800, 0x0, 0xffffffff00000000}], ['\x00']}) 11:39:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000440)={@private1}, 0x20) 11:39:30 executing program 5: clone3(&(0x7f0000000e40)={0x1c200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:39:30 executing program 6: mq_open(&(0x7f0000000880)=']-\xf4]+)-\x00', 0x40, 0x0, 0x0) 11:39:30 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair(0x2, 0x3, 0x9, &(0x7f0000000c00)) 11:39:30 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x41) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) close(r1) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r3}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r3, 0xffffffffffffffff, r2, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) r5 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x40, 0xfffffffffffffff8}) [ 124.091392] FAT-fs (loop2): bogus number of reserved sectors [ 124.092118] FAT-fs (loop2): Can't find a valid FAT filesystem [ 124.109404] FAT-fs (loop2): bogus number of reserved sectors [ 124.110128] FAT-fs (loop2): Can't find a valid FAT filesystem 11:39:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000040)) 11:39:30 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) 11:39:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:39:30 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair(0x2, 0x3, 0x9, &(0x7f0000000c00)) 11:39:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, '\x00', [{}, {0x800, 0x0, 0xffffffff00000000}], ['\x00']}) 11:39:30 executing program 2: syz_mount_image$vfat(&(0x7f0000008700), &(0x7f0000008740)='./file0\x00', 0x0, 0x0, &(0x7f0000008c80), 0x0, &(0x7f0000008d40)) 11:39:30 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002240), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2289, 0x0) 11:39:30 executing program 5: futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) [ 124.294620] FAT-fs (loop2): bogus number of reserved sectors [ 124.295515] FAT-fs (loop2): Can't find a valid FAT filesystem [ 124.336705] blktrace: Concurrent blktraces are not allowed on sg0 11:39:31 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair(0x2, 0x3, 0x9, &(0x7f0000000c00)) 11:39:31 executing program 7: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)) 11:39:31 executing program 2: syz_mount_image$vfat(&(0x7f0000008700), &(0x7f0000008740)='./file0\x00', 0x0, 0x0, &(0x7f0000008c80), 0x0, &(0x7f0000008d40)) 11:39:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, '\x00', [{}, {0x800, 0x0, 0xffffffff00000000}], ['\x00']}) 11:39:31 executing program 0: io_setup(0x200, &(0x7f0000000700)) io_submit(0x0, 0x0, 0x0) 11:39:31 executing program 5: futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) 11:39:31 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x41) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) close(r1) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r3}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r3, 0xffffffffffffffff, r2, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) r5 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x40, 0xfffffffffffffff8}) 11:39:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0 VM DIAGNOSIS: 11:39:26 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88801ca85040 RSP=ffff88801bab7ee8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88801bab7f58 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81461cf0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2a28b3b540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2a28b633c0 CR3=000000003f7ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823c0801 RDI=ffffffff8765c9e0 RBP=ffffffff8765c9a0 RSP=ffff8880400e7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765c9a0 R14=0000000000000010 R15=ffffffff823c07f0 RIP=ffffffff823c0859 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f771408a700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd293e7c6f4 CR3=000000000f896000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7716bfb7c000007f7716bfb7c8 XMM02=00007f7716bfb7e000007f7716bfb7c0 XMM03=00007f7716bfb7c800007f7716bfb7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000