Warning: Permanently added '[localhost]:18556' (ECDSA) to the list of known hosts.
2022/09/15 11:51:56 fuzzer started
2022/09/15 11:51:56 dialing manager at localhost:36559
syzkaller login: [   38.155518] cgroup: Unknown subsys name 'net'
[   38.271517] cgroup: Unknown subsys name 'rlimit'
2022/09/15 11:52:11 syscalls: 2215
2022/09/15 11:52:11 code coverage: enabled
2022/09/15 11:52:11 comparison tracing: enabled
2022/09/15 11:52:11 extra coverage: enabled
2022/09/15 11:52:11 setuid sandbox: enabled
2022/09/15 11:52:11 namespace sandbox: enabled
2022/09/15 11:52:11 Android sandbox: enabled
2022/09/15 11:52:11 fault injection: enabled
2022/09/15 11:52:11 leak checking: enabled
2022/09/15 11:52:11 net packet injection: enabled
2022/09/15 11:52:11 net device setup: enabled
2022/09/15 11:52:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/15 11:52:11 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/15 11:52:11 USB emulation: enabled
2022/09/15 11:52:11 hci packet injection: enabled
2022/09/15 11:52:11 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220915                                          )
2022/09/15 11:52:11 802.15.4 emulation: enabled
2022/09/15 11:52:11 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/15 11:52:11 fetching corpus: 50, signal 28511/31828 (executing program)
2022/09/15 11:52:11 fetching corpus: 100, signal 40126/44743 (executing program)
2022/09/15 11:52:11 fetching corpus: 150, signal 45218/51103 (executing program)
2022/09/15 11:52:12 fetching corpus: 200, signal 53352/60258 (executing program)
2022/09/15 11:52:12 fetching corpus: 250, signal 62762/70428 (executing program)
2022/09/15 11:52:12 fetching corpus: 300, signal 69779/78110 (executing program)
2022/09/15 11:52:12 fetching corpus: 350, signal 73471/82681 (executing program)
2022/09/15 11:52:12 fetching corpus: 400, signal 76784/86786 (executing program)
2022/09/15 11:52:12 fetching corpus: 450, signal 82290/92737 (executing program)
2022/09/15 11:52:13 fetching corpus: 500, signal 85603/96708 (executing program)
2022/09/15 11:52:13 fetching corpus: 550, signal 88766/100412 (executing program)
2022/09/15 11:52:13 fetching corpus: 600, signal 92336/104358 (executing program)
2022/09/15 11:52:13 fetching corpus: 650, signal 97428/109603 (executing program)
2022/09/15 11:52:13 fetching corpus: 700, signal 101412/113850 (executing program)
2022/09/15 11:52:13 fetching corpus: 750, signal 104388/117142 (executing program)
2022/09/15 11:52:14 fetching corpus: 800, signal 106737/119826 (executing program)
2022/09/15 11:52:14 fetching corpus: 850, signal 108884/122253 (executing program)
2022/09/15 11:52:14 fetching corpus: 900, signal 112295/125674 (executing program)
2022/09/15 11:52:14 fetching corpus: 950, signal 115231/128634 (executing program)
2022/09/15 11:52:14 fetching corpus: 1000, signal 116947/130565 (executing program)
2022/09/15 11:52:14 fetching corpus: 1050, signal 119476/133094 (executing program)
2022/09/15 11:52:15 fetching corpus: 1100, signal 121927/135476 (executing program)
2022/09/15 11:52:15 fetching corpus: 1150, signal 124182/137705 (executing program)
2022/09/15 11:52:15 fetching corpus: 1199, signal 125772/139433 (executing program)
2022/09/15 11:52:15 fetching corpus: 1249, signal 128330/141742 (executing program)
2022/09/15 11:52:15 fetching corpus: 1298, signal 130004/143379 (executing program)
2022/09/15 11:52:15 fetching corpus: 1348, signal 131819/145141 (executing program)
2022/09/15 11:52:16 fetching corpus: 1398, signal 133156/146480 (executing program)
2022/09/15 11:52:16 fetching corpus: 1447, signal 135170/148226 (executing program)
2022/09/15 11:52:16 fetching corpus: 1496, signal 136469/149477 (executing program)
2022/09/15 11:52:16 fetching corpus: 1546, signal 138134/150955 (executing program)
2022/09/15 11:52:16 fetching corpus: 1592, signal 139888/152532 (executing program)
2022/09/15 11:52:16 fetching corpus: 1642, signal 141305/153783 (executing program)
2022/09/15 11:52:16 fetching corpus: 1691, signal 143022/155151 (executing program)
2022/09/15 11:52:16 fetching corpus: 1741, signal 144611/156552 (executing program)
2022/09/15 11:52:17 fetching corpus: 1791, signal 145934/157667 (executing program)
2022/09/15 11:52:17 fetching corpus: 1839, signal 147444/158852 (executing program)
2022/09/15 11:52:17 fetching corpus: 1889, signal 149028/160029 (executing program)
2022/09/15 11:52:17 fetching corpus: 1939, signal 150384/161054 (executing program)
2022/09/15 11:52:17 fetching corpus: 1989, signal 151647/162067 (executing program)
2022/09/15 11:52:17 fetching corpus: 2039, signal 153728/163732 (executing program)
2022/09/15 11:52:17 fetching corpus: 2089, signal 154555/164381 (executing program)
2022/09/15 11:52:18 fetching corpus: 2139, signal 155694/165115 (executing program)
2022/09/15 11:52:18 fetching corpus: 2188, signal 157020/165952 (executing program)
2022/09/15 11:52:18 fetching corpus: 2238, signal 157829/166524 (executing program)
2022/09/15 11:52:18 fetching corpus: 2288, signal 159189/167289 (executing program)
2022/09/15 11:52:18 fetching corpus: 2338, signal 161491/169019 (executing program)
2022/09/15 11:52:18 fetching corpus: 2388, signal 163097/169832 (executing program)
2022/09/15 11:52:18 fetching corpus: 2436, signal 164560/170713 (executing program)
2022/09/15 11:52:19 fetching corpus: 2485, signal 165471/171331 (executing program)
2022/09/15 11:52:19 fetching corpus: 2535, signal 166587/171944 (executing program)
2022/09/15 11:52:19 fetching corpus: 2585, signal 167565/172445 (executing program)
2022/09/15 11:52:19 fetching corpus: 2635, signal 168308/172822 (executing program)
2022/09/15 11:52:19 fetching corpus: 2684, signal 168992/173176 (executing program)
2022/09/15 11:52:19 fetching corpus: 2698, signal 169436/173415 (executing program)
2022/09/15 11:52:19 fetching corpus: 2698, signal 169436/173500 (executing program)
2022/09/15 11:52:19 fetching corpus: 2698, signal 169436/173570 (executing program)
2022/09/15 11:52:19 fetching corpus: 2698, signal 169436/173641 (executing program)
2022/09/15 11:52:19 fetching corpus: 2698, signal 169436/173707 (executing program)
2022/09/15 11:52:19 fetching corpus: 2700, signal 169490/173798 (executing program)
2022/09/15 11:52:19 fetching corpus: 2700, signal 169564/173891 (executing program)
2022/09/15 11:52:19 fetching corpus: 2700, signal 169564/173961 (executing program)
2022/09/15 11:52:19 fetching corpus: 2700, signal 169564/174029 (executing program)
2022/09/15 11:52:19 fetching corpus: 2700, signal 169564/174101 (executing program)
2022/09/15 11:52:19 fetching corpus: 2700, signal 169564/174177 (executing program)
2022/09/15 11:52:19 fetching corpus: 2700, signal 169564/174240 (executing program)
2022/09/15 11:52:19 fetching corpus: 2700, signal 169564/174318 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/174386 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/174440 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/174508 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/174585 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/174660 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/174729 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/174800 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/174868 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/174918 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/174992 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/175052 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/175125 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/175177 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/175245 (executing program)
2022/09/15 11:52:19 fetching corpus: 2701, signal 169565/175317 (executing program)
2022/09/15 11:52:20 fetching corpus: 2701, signal 169565/175360 (executing program)
2022/09/15 11:52:20 fetching corpus: 2701, signal 169571/175360 (executing program)
2022/09/15 11:52:20 fetching corpus: 2701, signal 169571/175360 (executing program)
2022/09/15 11:52:22 starting 8 fuzzer processes
11:52:22 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/stat\x00')
fstat(r0, &(0x7f0000000080))

11:52:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e000100000000000000000007000000d8c93100000080"], 0x1c}], 0x1}, 0x0)

11:52:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x80045430, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, "53a14f361e559084047112d4b940ce874276eb"})

11:52:22 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]})

11:52:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x0)

11:52:22 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "bea47e", 0x8, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@routing={0x0, 0x0, 0x1, 0x4}]}}}}}, 0x0)

11:52:22 executing program 6:
semtimedop(0x0, 0x0, 0x1f4, 0x0)

[   63.166633] audit: type=1400 audit(1663242742.962:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:52:22 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0)

[   64.494888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.500094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.501589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.505902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.509316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   64.510581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.517777] Bluetooth: hci0: HCI_REQ-0x0c1a
[   64.556346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.569347] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   64.571175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   64.572266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.573821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   64.575867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   64.577470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   64.579002] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   64.580306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.582061] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   64.596026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   64.597386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   64.598547] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   64.599624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.603412] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   64.607018] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   64.608590] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   64.610602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   64.612591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   64.614170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   64.618841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   64.620323] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   64.621809] Bluetooth: hci4: HCI_REQ-0x0c1a
[   64.623733] Bluetooth: hci3: HCI_REQ-0x0c1a
[   64.632396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   64.640555] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.648334] Bluetooth: hci5: HCI_REQ-0x0c1a
[   64.651422] Bluetooth: hci2: HCI_REQ-0x0c1a
[   66.568280] Bluetooth: hci0: command 0x0409 tx timeout
[   66.568719] Bluetooth: hci1: Opcode 0x c03 failed: -110
[   66.632219] Bluetooth: hci7: Opcode 0x c03 failed: -110
[   66.632715] Bluetooth: hci6: Opcode 0x c03 failed: -110
[   66.695834] Bluetooth: hci4: command 0x0409 tx timeout
[   66.696778] Bluetooth: hci2: command 0x0409 tx timeout
[   66.697643] Bluetooth: hci5: command 0x0409 tx timeout
[   66.698239] Bluetooth: hci3: command 0x0409 tx timeout
[   68.615710] Bluetooth: hci0: command 0x041b tx timeout
[   68.744061] Bluetooth: hci3: command 0x041b tx timeout
[   68.745448] Bluetooth: hci5: command 0x041b tx timeout
[   68.745929] Bluetooth: hci2: command 0x041b tx timeout
[   68.746352] Bluetooth: hci4: command 0x041b tx timeout
[   69.579730] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   69.582401] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   69.583808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   69.584720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   69.585628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   69.586802] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   69.588773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   69.591159] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   69.591731] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   69.592885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   69.593860] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   69.595015] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   69.596897] Bluetooth: hci6: HCI_REQ-0x0c1a
[   69.695751] Bluetooth: hci7: HCI_REQ-0x0c1a
[   70.663739] Bluetooth: hci0: command 0x040f tx timeout
[   70.791936] Bluetooth: hci4: command 0x040f tx timeout
[   70.792871] Bluetooth: hci2: command 0x040f tx timeout
[   70.793893] Bluetooth: hci5: command 0x040f tx timeout
[   70.794755] Bluetooth: hci3: command 0x040f tx timeout
[   71.432867] Bluetooth: hci1: Opcode 0x c03 failed: -110
[   71.623761] Bluetooth: hci6: command 0x0409 tx timeout
[   71.753061] Bluetooth: hci7: command 0x0409 tx timeout
[   72.711852] Bluetooth: hci0: command 0x0419 tx timeout
[   72.839861] Bluetooth: hci3: command 0x0419 tx timeout
[   72.841051] Bluetooth: hci5: command 0x0419 tx timeout
[   72.842132] Bluetooth: hci2: command 0x0419 tx timeout
[   72.842938] Bluetooth: hci4: command 0x0419 tx timeout
[   73.672623] Bluetooth: hci6: command 0x041b tx timeout
[   73.799818] Bluetooth: hci7: command 0x041b tx timeout
[   74.115239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.116485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.117897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.120551] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.121768] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   74.123142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.130128] Bluetooth: hci1: HCI_REQ-0x0c1a
[   75.720989] Bluetooth: hci6: command 0x040f tx timeout
[   75.848722] Bluetooth: hci7: command 0x040f tx timeout
[   76.167969] Bluetooth: hci1: command 0x0409 tx timeout
[   77.768038] Bluetooth: hci6: command 0x0419 tx timeout
[   77.896973] Bluetooth: hci7: command 0x0419 tx timeout
[   78.215760] Bluetooth: hci1: command 0x041b tx timeout
[   80.263968] Bluetooth: hci1: command 0x040f tx timeout
[   82.311751] Bluetooth: hci1: command 0x0419 tx timeout
11:53:16 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "bea47e", 0x8, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@routing={0x0, 0x0, 0x1, 0x4}]}}}}}, 0x0)

11:53:17 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "bea47e", 0x8, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@routing={0x0, 0x0, 0x1, 0x4}]}}}}}, 0x0)

11:53:17 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "bea47e", 0x8, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@routing={0x0, 0x0, 0x1, 0x4}]}}}}}, 0x0)

11:53:17 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x2, 0x4, 0x1, 0x8000, 0x5, [{0x7fff, 0xffff, 0x7f, '\x00', 0x800}, {0x1, 0xee16, 0x86, '\x00', 0x48a}, {0x8, 0x9, 0x9, '\x00', 0x3000}, {0x3, 0x10000, 0x7, '\x00', 0x3080}, {0x9, 0x8, 0x10000, '\x00', 0x3105}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x83}}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="aee60b9d3a16bf3a0d8f84f70adfb0d08dabbd09704165008be1315c6ce97074b640dda589f635ce9b68e9fb11261eb08eebe7583173caf4f348a65a57f974619ac98150491b3f637856cc6ba82696ed7f5e64b960518203f82de637e0a3d943372f48f716ae5f47a0d23a", 0x6b, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="35883ddb17a16d0a79de2b26aa8d9dea022651", 0x13, 0x7f}])
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14)
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
fallocate(r3, 0x3f, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x21)

[  117.519777] audit: type=1400 audit(1663242797.315:7): avc:  denied  { open } for  pid=3599 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  117.521259] audit: type=1400 audit(1663242797.316:8): avc:  denied  { kernel } for  pid=3599 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  117.530052] ------------[ cut here ]------------
[  117.530074] 
[  117.530077] ======================================================
[  117.530081] WARNING: possible circular locking dependency detected
[  117.530085] 6.0.0-rc5-next-20220915 #1 Not tainted
[  117.530092] ------------------------------------------------------
[  117.530096] syz-executor.5/3600 is trying to acquire lock:
[  117.530102] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  117.530140] 
[  117.530140] but task is already holding lock:
[  117.530143] ffff88800ea8dc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  117.530170] 
[  117.530170] which lock already depends on the new lock.
[  117.530170] 
[  117.530174] 
[  117.530174] the existing dependency chain (in reverse order) is:
[  117.530177] 
[  117.530177] -> #3 (&ctx->lock){....}-{2:2}:
[  117.530190]        _raw_spin_lock+0x2a/0x40
[  117.530208]        __perf_event_task_sched_out+0x53b/0x18d0
[  117.530221]        __schedule+0xedd/0x2470
[  117.530231]        schedule+0xda/0x1b0
[  117.530241]        exit_to_user_mode_prepare+0x114/0x1a0
[  117.530262]        syscall_exit_to_user_mode+0x19/0x40
[  117.530281]        do_syscall_64+0x48/0x90
[  117.530295]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  117.530314] 
[  117.530314] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  117.530327]        _raw_spin_lock_nested+0x30/0x40
[  117.530343]        raw_spin_rq_lock_nested+0x1e/0x30
[  117.530356]        task_fork_fair+0x63/0x4d0
[  117.530374]        sched_cgroup_fork+0x3d0/0x540
[  117.530388]        copy_process+0x4183/0x6e20
[  117.530399]        kernel_clone+0xe7/0x890
[  117.530408]        user_mode_thread+0xad/0xf0
[  117.530419]        rest_init+0x24/0x250
[  117.530436]        arch_call_rest_init+0xf/0x14
[  117.530448]        start_kernel+0x4c1/0x4e6
[  117.530458]        secondary_startup_64_no_verify+0xe0/0xeb
[  117.530473] 
[  117.530473] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  117.530486]        _raw_spin_lock_irqsave+0x39/0x60
[  117.530502]        try_to_wake_up+0xab/0x1920
[  117.530515]        up+0x75/0xb0
[  117.530526]        __up_console_sem+0x6e/0x80
[  117.530543]        console_unlock+0x46a/0x590
[  117.530559]        vt_ioctl+0x2822/0x2ca0
[  117.530572]        tty_ioctl+0x7c4/0x1700
[  117.530584]        __x64_sys_ioctl+0x19a/0x210
[  117.530600]        do_syscall_64+0x3b/0x90
[  117.530616]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  117.530633] 
[  117.530633] -> #0 ((console_sem).lock){....}-{2:2}:
[  117.530647]        __lock_acquire+0x2a02/0x5e70
[  117.530664]        lock_acquire+0x1a2/0x530
[  117.530680]        _raw_spin_lock_irqsave+0x39/0x60
[  117.530695]        down_trylock+0xe/0x70
[  117.530707]        __down_trylock_console_sem+0x3b/0xd0
[  117.530724]        vprintk_emit+0x16b/0x560
[  117.530741]        vprintk+0x84/0xa0
[  117.530757]        _printk+0xba/0xf1
[  117.530776]        report_bug.cold+0x72/0xab
[  117.530789]        handle_bug+0x3c/0x70
[  117.530802]        exc_invalid_op+0x14/0x50
[  117.530816]        asm_exc_invalid_op+0x16/0x20
[  117.530832]        group_sched_out.part.0+0x2c7/0x460
[  117.530843]        ctx_sched_out+0x8f1/0xc10
[  117.530853]        __perf_event_task_sched_out+0x6d0/0x18d0
[  117.530865]        __schedule+0xedd/0x2470
[  117.530875]        schedule+0xda/0x1b0
[  117.530885]        exit_to_user_mode_prepare+0x114/0x1a0
[  117.530904]        syscall_exit_to_user_mode+0x19/0x40
[  117.530922]        do_syscall_64+0x48/0x90
[  117.530935]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  117.530953] 
[  117.530953] other info that might help us debug this:
[  117.530953] 
[  117.530955] Chain exists of:
[  117.530955]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  117.530955] 
[  117.530970]  Possible unsafe locking scenario:
[  117.530970] 
[  117.530973]        CPU0                    CPU1
[  117.530975]        ----                    ----
[  117.530977]   lock(&ctx->lock);
[  117.530983]                                lock(&rq->__lock);
[  117.530989]                                lock(&ctx->lock);
[  117.530995]   lock((console_sem).lock);
[  117.531001] 
[  117.531001]  *** DEADLOCK ***
[  117.531001] 
[  117.531003] 2 locks held by syz-executor.5/3600:
[  117.531010]  #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  117.531036]  #1: ffff88800ea8dc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  117.531063] 
[  117.531063] stack backtrace:
[  117.531066] CPU: 0 PID: 3600 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220915 #1
[  117.531079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  117.531088] Call Trace:
[  117.531091]  <TASK>
[  117.531095]  dump_stack_lvl+0x8b/0xb3
[  117.531111]  check_noncircular+0x263/0x2e0
[  117.531128]  ? format_decode+0x26c/0xb50
[  117.531143]  ? print_circular_bug+0x450/0x450
[  117.531161]  ? enable_ptr_key_workfn+0x20/0x20
[  117.531176]  ? format_decode+0x26c/0xb50
[  117.531192]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  117.531210]  __lock_acquire+0x2a02/0x5e70
[  117.531232]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  117.531255]  lock_acquire+0x1a2/0x530
[  117.531272]  ? down_trylock+0xe/0x70
[  117.531287]  ? rcu_read_unlock+0x40/0x40
[  117.531308]  ? vprintk+0x84/0xa0
[  117.531326]  _raw_spin_lock_irqsave+0x39/0x60
[  117.531342]  ? down_trylock+0xe/0x70
[  117.531356]  down_trylock+0xe/0x70
[  117.531369]  ? vprintk+0x84/0xa0
[  117.531387]  __down_trylock_console_sem+0x3b/0xd0
[  117.531404]  vprintk_emit+0x16b/0x560
[  117.531424]  vprintk+0x84/0xa0
[  117.531442]  _printk+0xba/0xf1
[  117.531460]  ? record_print_text.cold+0x16/0x16
[  117.531483]  ? report_bug.cold+0x66/0xab
[  117.531497]  ? group_sched_out.part.0+0x2c7/0x460
[  117.531509]  report_bug.cold+0x72/0xab
[  117.531524]  handle_bug+0x3c/0x70
[  117.531538]  exc_invalid_op+0x14/0x50
[  117.531568]  asm_exc_invalid_op+0x16/0x20
[  117.531586] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  117.531600] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  117.531611] RSP: 0018:ffff88803f747c48 EFLAGS: 00010006
[  117.531620] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  117.531628] RDX: ffff8880185f5040 RSI: ffffffff81566027 RDI: 0000000000000005
[  117.531636] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  117.531643] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800ea8dc00
[  117.531651] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  117.531662]  ? group_sched_out.part.0+0x2c7/0x460
[  117.531675]  ? group_sched_out.part.0+0x2c7/0x460
[  117.531688]  ctx_sched_out+0x8f1/0xc10
[  117.531700]  __perf_event_task_sched_out+0x6d0/0x18d0
[  117.531716]  ? lock_is_held_type+0xd7/0x130
[  117.531735]  ? __perf_cgroup_move+0x160/0x160
[  117.531747]  ? set_next_entity+0x304/0x550
[  117.531765]  ? update_curr+0x267/0x740
[  117.531784]  ? lock_is_held_type+0xd7/0x130
[  117.531803]  __schedule+0xedd/0x2470
[  117.531816]  ? io_schedule_timeout+0x150/0x150
[  117.531830]  ? rcu_read_lock_sched_held+0x3e/0x80
[  117.531850]  schedule+0xda/0x1b0
[  117.531862]  exit_to_user_mode_prepare+0x114/0x1a0
[  117.531883]  syscall_exit_to_user_mode+0x19/0x40
[  117.531901]  do_syscall_64+0x48/0x90
[  117.531916]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  117.531935] RIP: 0033:0x7f8ff8f50b19
[  117.531943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  117.531954] RSP: 002b:00007f8ff64c6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  117.531965] RAX: 0000000000000001 RBX: 00007f8ff9063f68 RCX: 00007f8ff8f50b19
[  117.531972] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ff9063f6c
[  117.531979] RBP: 00007f8ff9063f60 R08: 000000000000000e R09: 0000000000000000
[  117.531986] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f8ff9063f6c
[  117.531994] R13: 00007fff5c6e93ef R14: 00007f8ff64c6300 R15: 0000000000022000
[  117.532007]  </TASK>
[  117.587482] WARNING: CPU: 0 PID: 3600 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  117.588179] Modules linked in:
[  117.588427] CPU: 0 PID: 3600 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220915 #1
[  117.589026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  117.589857] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  117.590258] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  117.591622] RSP: 0018:ffff88803f747c48 EFLAGS: 00010006
[  117.592030] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  117.592551] RDX: ffff8880185f5040 RSI: ffffffff81566027 RDI: 0000000000000005
[  117.593089] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  117.593617] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800ea8dc00
[  117.594154] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  117.594681] FS:  00007f8ff64c6700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  117.595271] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.595711] CR2: 00007f8c48f636f4 CR3: 000000001d4f2000 CR4: 0000000000350ef0
[  117.596246] Call Trace:
[  117.596441]  <TASK>
[  117.596616]  ctx_sched_out+0x8f1/0xc10
[  117.596912]  __perf_event_task_sched_out+0x6d0/0x18d0
[  117.597298]  ? lock_is_held_type+0xd7/0x130
[  117.597627]  ? __perf_cgroup_move+0x160/0x160
[  117.597965]  ? set_next_entity+0x304/0x550
[  117.598294]  ? update_curr+0x267/0x740
[  117.598595]  ? lock_is_held_type+0xd7/0x130
[  117.598930]  __schedule+0xedd/0x2470
[  117.599210]  ? io_schedule_timeout+0x150/0x150
[  117.599554]  ? rcu_read_lock_sched_held+0x3e/0x80
[  117.599930]  schedule+0xda/0x1b0
[  117.600194]  exit_to_user_mode_prepare+0x114/0x1a0
[  117.600569]  syscall_exit_to_user_mode+0x19/0x40
[  117.600937]  do_syscall_64+0x48/0x90
[  117.601225]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  117.601624] RIP: 0033:0x7f8ff8f50b19
[  117.601906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  117.603246] RSP: 002b:00007f8ff64c6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  117.603802] RAX: 0000000000000001 RBX: 00007f8ff9063f68 RCX: 00007f8ff8f50b19
[  117.604335] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ff9063f6c
[  117.604868] RBP: 00007f8ff9063f60 R08: 000000000000000e R09: 0000000000000000
[  117.605407] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f8ff9063f6c
[  117.605942] R13: 00007fff5c6e93ef R14: 00007f8ff64c6300 R15: 0000000000022000
[  117.606480]  </TASK>
[  117.606660] irq event stamp: 1234
[  117.606922] hardirqs last  enabled at (1233): [<ffffffff8133ffc9>] exit_to_user_mode_prepare+0x109/0x1a0
[  117.607647] hardirqs last disabled at (1234): [<ffffffff8424cb25>] __schedule+0x1225/0x2470
[  117.608273] softirqs last  enabled at (976): [<ffffffff8117063b>] __irq_exit_rcu+0x11b/0x180
[  117.608915] softirqs last disabled at (727): [<ffffffff8117063b>] __irq_exit_rcu+0x11b/0x180
[  117.609561] ---[ end trace 0000000000000000 ]---
11:53:17 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x2, 0x4, 0x1, 0x8000, 0x5, [{0x7fff, 0xffff, 0x7f, '\x00', 0x800}, {0x1, 0xee16, 0x86, '\x00', 0x48a}, {0x8, 0x9, 0x9, '\x00', 0x3000}, {0x3, 0x10000, 0x7, '\x00', 0x3080}, {0x9, 0x8, 0x10000, '\x00', 0x3105}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x83}}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="aee60b9d3a16bf3a0d8f84f70adfb0d08dabbd09704165008be1315c6ce97074b640dda589f635ce9b68e9fb11261eb08eebe7583173caf4f348a65a57f974619ac98150491b3f637856cc6ba82696ed7f5e64b960518203f82de637e0a3d943372f48f716ae5f47a0d23a", 0x6b, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="35883ddb17a16d0a79de2b26aa8d9dea022651", 0x13, 0x7f}])
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14)
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
fallocate(r3, 0x3f, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x21)

11:53:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x2, 0x4, 0x1, 0x8000, 0x5, [{0x7fff, 0xffff, 0x7f, '\x00', 0x800}, {0x1, 0xee16, 0x86, '\x00', 0x48a}, {0x8, 0x9, 0x9, '\x00', 0x3000}, {0x3, 0x10000, 0x7, '\x00', 0x3080}, {0x9, 0x8, 0x10000, '\x00', 0x3105}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x83}}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="aee60b9d3a16bf3a0d8f84f70adfb0d08dabbd09704165008be1315c6ce97074b640dda589f635ce9b68e9fb11261eb08eebe7583173caf4f348a65a57f974619ac98150491b3f637856cc6ba82696ed7f5e64b960518203f82de637e0a3d943372f48f716ae5f47a0d23a", 0x6b, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="35883ddb17a16d0a79de2b26aa8d9dea022651", 0x13, 0x7f}])
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14)
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
fallocate(r3, 0x3f, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x21)

[  118.379666] hrtimer: interrupt took 9277 ns
11:53:18 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0)

11:53:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x2, 0x4, 0x1, 0x8000, 0x5, [{0x7fff, 0xffff, 0x7f, '\x00', 0x800}, {0x1, 0xee16, 0x86, '\x00', 0x48a}, {0x8, 0x9, 0x9, '\x00', 0x3000}, {0x3, 0x10000, 0x7, '\x00', 0x3080}, {0x9, 0x8, 0x10000, '\x00', 0x3105}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x83}}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="aee60b9d3a16bf3a0d8f84f70adfb0d08dabbd09704165008be1315c6ce97074b640dda589f635ce9b68e9fb11261eb08eebe7583173caf4f348a65a57f974619ac98150491b3f637856cc6ba82696ed7f5e64b960518203f82de637e0a3d943372f48f716ae5f47a0d23a", 0x6b, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="35883ddb17a16d0a79de2b26aa8d9dea022651", 0x13, 0x7f}])
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14)
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
fallocate(r3, 0x3f, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x21)

[  119.366855] audit: type=1326 audit(1663242799.162:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3760 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1801adb19 code=0x0
11:53:23 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/stat\x00')
fstat(r0, &(0x7f0000000080))

11:53:23 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0)

11:53:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x80045430, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, "53a14f361e559084047112d4b940ce874276eb"})

11:53:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e000100000000000000000007000000d8c93100000080"], 0x1c}], 0x1}, 0x0)

11:53:23 executing program 6:
semtimedop(0x0, 0x0, 0x1f4, 0x0)

11:53:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x2, 0x4, 0x1, 0x8000, 0x5, [{0x7fff, 0xffff, 0x7f, '\x00', 0x800}, {0x1, 0xee16, 0x86, '\x00', 0x48a}, {0x8, 0x9, 0x9, '\x00', 0x3000}, {0x3, 0x10000, 0x7, '\x00', 0x3080}, {0x9, 0x8, 0x10000, '\x00', 0x3105}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x83}}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="aee60b9d3a16bf3a0d8f84f70adfb0d08dabbd09704165008be1315c6ce97074b640dda589f635ce9b68e9fb11261eb08eebe7583173caf4f348a65a57f974619ac98150491b3f637856cc6ba82696ed7f5e64b960518203f82de637e0a3d943372f48f716ae5f47a0d23a", 0x6b, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="35883ddb17a16d0a79de2b26aa8d9dea022651", 0x13, 0x7f}])
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14)
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
fallocate(r3, 0x3f, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x21)

11:53:23 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x0)

11:53:23 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]})

[  123.309180] audit: type=1326 audit(1663242803.105:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3979 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1801adb19 code=0x0
11:53:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e000100000000000000000007000000d8c93100000080"], 0x1c}], 0x1}, 0x0)

11:53:23 executing program 6:
semtimedop(0x0, 0x0, 0x1f4, 0x0)

11:53:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x80045430, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, "53a14f361e559084047112d4b940ce874276eb"})

11:53:23 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x0)

11:53:23 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]})

[  123.427441] audit: type=1326 audit(1663242803.223:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3995 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1801adb19 code=0x0
11:53:23 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/stat\x00')
fstat(r0, &(0x7f0000000080))

11:53:23 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0)

11:53:23 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x0)

11:53:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x80045430, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, "53a14f361e559084047112d4b940ce874276eb"})

11:53:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e000100000000000000000007000000d8c93100000080"], 0x1c}], 0x1}, 0x0)

11:53:23 executing program 6:
semtimedop(0x0, 0x0, 0x1f4, 0x0)

11:53:23 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]})

11:53:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x2, 0x4, 0x1, 0x8000, 0x5, [{0x7fff, 0xffff, 0x7f, '\x00', 0x800}, {0x1, 0xee16, 0x86, '\x00', 0x48a}, {0x8, 0x9, 0x9, '\x00', 0x3000}, {0x3, 0x10000, 0x7, '\x00', 0x3080}, {0x9, 0x8, 0x10000, '\x00', 0x3105}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x83}}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="aee60b9d3a16bf3a0d8f84f70adfb0d08dabbd09704165008be1315c6ce97074b640dda589f635ce9b68e9fb11261eb08eebe7583173caf4f348a65a57f974619ac98150491b3f637856cc6ba82696ed7f5e64b960518203f82de637e0a3d943372f48f716ae5f47a0d23a", 0x6b, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="35883ddb17a16d0a79de2b26aa8d9dea022651", 0x13, 0x7f}])
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14)
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
fallocate(r3, 0x3f, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x21)

11:53:23 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x2, 0x4, 0x1, 0x8000, 0x5, [{0x7fff, 0xffff, 0x7f, '\x00', 0x800}, {0x1, 0xee16, 0x86, '\x00', 0x48a}, {0x8, 0x9, 0x9, '\x00', 0x3000}, {0x3, 0x10000, 0x7, '\x00', 0x3080}, {0x9, 0x8, 0x10000, '\x00', 0x3105}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x83}}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="aee60b9d3a16bf3a0d8f84f70adfb0d08dabbd09704165008be1315c6ce97074b640dda589f635ce9b68e9fb11261eb08eebe7583173caf4f348a65a57f974619ac98150491b3f637856cc6ba82696ed7f5e64b960518203f82de637e0a3d943372f48f716ae5f47a0d23a", 0x6b, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="35883ddb17a16d0a79de2b26aa8d9dea022651", 0x13, 0x7f}])
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14)
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
fallocate(r3, 0x3f, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x21)

[  123.551093] audit: type=1326 audit(1663242803.347:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4011 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1801adb19 code=0x0
11:53:23 executing program 6:
clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000001480)=""/198, 0xc6, 0x0, 0x0}, 0x58)

11:53:23 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/stat\x00')
fstat(r0, &(0x7f0000000080))

11:53:24 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x2, 0x4, 0x1, 0x8000, 0x5, [{0x7fff, 0xffff, 0x7f, '\x00', 0x800}, {0x1, 0xee16, 0x86, '\x00', 0x48a}, {0x8, 0x9, 0x9, '\x00', 0x3000}, {0x3, 0x10000, 0x7, '\x00', 0x3080}, {0x9, 0x8, 0x10000, '\x00', 0x3105}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x83}}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="aee60b9d3a16bf3a0d8f84f70adfb0d08dabbd09704165008be1315c6ce97074b640dda589f635ce9b68e9fb11261eb08eebe7583173caf4f348a65a57f974619ac98150491b3f637856cc6ba82696ed7f5e64b960518203f82de637e0a3d943372f48f716ae5f47a0d23a", 0x6b, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="35883ddb17a16d0a79de2b26aa8d9dea022651", 0x13, 0x7f}])
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14)
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
fallocate(r3, 0x3f, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x21)

11:53:24 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b31, &(0x7f0000000040))

11:53:24 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:24 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)

11:53:24 executing program 3:
syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x60, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c00, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0)

11:53:24 executing program 6:
clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000001480)=""/198, 0xc6, 0x0, 0x0}, 0x58)

11:53:24 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x2, 0x4, 0x1, 0x8000, 0x5, [{0x7fff, 0xffff, 0x7f, '\x00', 0x800}, {0x1, 0xee16, 0x86, '\x00', 0x48a}, {0x8, 0x9, 0x9, '\x00', 0x3000}, {0x3, 0x10000, 0x7, '\x00', 0x3080}, {0x9, 0x8, 0x10000, '\x00', 0x3105}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x83}}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="aee60b9d3a16bf3a0d8f84f70adfb0d08dabbd09704165008be1315c6ce97074b640dda589f635ce9b68e9fb11261eb08eebe7583173caf4f348a65a57f974619ac98150491b3f637856cc6ba82696ed7f5e64b960518203f82de637e0a3d943372f48f716ae5f47a0d23a", 0x6b, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="35883ddb17a16d0a79de2b26aa8d9dea022651", 0x13, 0x7f}])
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14)
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
fallocate(r3, 0x3f, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x21)

11:53:24 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x1, 0xd6c3})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000140)=0x100, 0x4)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0)

11:53:24 executing program 3:
syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x60, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c00, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0)

11:53:24 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)

[  124.704403] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht'
11:53:24 executing program 3:
syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x60, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c00, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0)

11:53:24 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b31, &(0x7f0000000040))

11:53:24 executing program 6:
clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000001480)=""/198, 0xc6, 0x0, 0x0}, 0x58)

11:53:24 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)

11:53:24 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x2, 0x4, 0x1, 0x8000, 0x5, [{0x7fff, 0xffff, 0x7f, '\x00', 0x800}, {0x1, 0xee16, 0x86, '\x00', 0x48a}, {0x8, 0x9, 0x9, '\x00', 0x3000}, {0x3, 0x10000, 0x7, '\x00', 0x3080}, {0x9, 0x8, 0x10000, '\x00', 0x3105}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x83}}]}, 0x1c}}, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="aee60b9d3a16bf3a0d8f84f70adfb0d08dabbd09704165008be1315c6ce97074b640dda589f635ce9b68e9fb11261eb08eebe7583173caf4f348a65a57f974619ac98150491b3f637856cc6ba82696ed7f5e64b960518203f82de637e0a3d943372f48f716ae5f47a0d23a", 0x6b, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="35883ddb17a16d0a79de2b26aa8d9dea022651", 0x13, 0x7f}])
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14)
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
fallocate(r3, 0x3f, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x21)

11:53:24 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x1, 0xd6c3})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000140)=0x100, 0x4)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0)

11:53:24 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:24 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x1, 0xd6c3})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000140)=0x100, 0x4)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0)

[  124.870279] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht'
[  124.887572] blktrace: Concurrent blktraces are not allowed on sg0
11:53:24 executing program 6:
clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000001480)=""/198, 0xc6, 0x0, 0x0}, 0x58)

11:53:24 executing program 3:
syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x60, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c00, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0)

11:53:24 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)

11:53:24 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b31, &(0x7f0000000040))

11:53:24 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x1, 0xd6c3})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000140)=0x100, 0x4)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0)

11:53:24 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:24 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b31, &(0x7f0000000040))

11:53:24 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

[  125.133148] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht'
11:53:24 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:24 executing program 3:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

[  125.210134] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht'
[  125.284211] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht'
[  125.356292] syz-executor.1 (4085) used greatest stack depth: 24744 bytes left
11:53:25 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x1, 0xd6c3})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000140)=0x100, 0x4)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0)

11:53:25 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x1, 0xd6c3})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000140)=0x100, 0x4)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0)

11:53:25 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:25 executing program 3:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:25 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:25 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b31, &(0x7f0000000040))

11:53:25 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x1, 0xd6c3})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000140)=0x100, 0x4)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0)

11:53:25 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:25 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

[  125.665130] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht'
11:53:25 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b31, &(0x7f0000000040))

11:53:25 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x1)

[  125.763572] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht'
11:53:25 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b31, &(0x7f0000000040))

11:53:25 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

11:53:25 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x1)

[  125.862906] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht'
11:53:25 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

11:53:25 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x1)

11:53:25 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

[  126.449243] syz-executor.3 (4105) used greatest stack depth: 24392 bytes left
11:53:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

11:53:26 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x1)

11:53:26 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

11:53:26 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

11:53:26 executing program 3:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:26 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x1ff00000000000})

11:53:26 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:26 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x0, 0x1})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0)
poll(&(0x7f00000005c0)=[{r0, 0x208}, {r1, 0x20}, {0xffffffffffffffff, 0x8000}, {r1, 0x8002}, {0xffffffffffffffff, 0x20e2}], 0x5, 0x9)
syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8})
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
dup(r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185fff882418b7769bd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039"], 0x14}], 0x1}, 0x0)

11:53:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

11:53:26 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366cef82e00080820000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0f", 0x10, 0x10000}, {&(0x7f0000010600)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010007ae770325132510000e770325103", 0x5b, 0x11000}, {&(0x7f0000010800)="2e2020202020202020202010007ae770325132510000e77032510300000000002e2e20202020202020202010", 0x2c, 0x15000}], 0x0, &(0x7f0000000080)=ANY=[])
r1 = dup(r0)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

11:53:26 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x1ff00000000000})

11:53:26 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

[  126.629115] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht'
[  126.653028] loop5: detected capacity change from 0 to 336
[  126.659380] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
11:53:26 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x8, 0x0, &(0x7f00000000c0))

11:53:26 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x1ff00000000000})

11:53:26 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

11:53:26 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366cef82e00080820000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0f", 0x10, 0x10000}, {&(0x7f0000010600)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010007ae770325132510000e770325103", 0x5b, 0x11000}, {&(0x7f0000010800)="2e2020202020202020202010007ae770325132510000e77032510300000000002e2e20202020202020202010", 0x2c, 0x15000}], 0x0, &(0x7f0000000080)=ANY=[])
r1 = dup(r0)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

11:53:26 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x8, 0x0, &(0x7f00000000c0))

[  126.861024] loop5: detected capacity change from 0 to 336
[  126.874548] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  127.435239] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht'
11:53:27 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

11:53:27 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

11:53:27 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x8, 0x0, &(0x7f00000000c0))

11:53:27 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366cef82e00080820000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0f", 0x10, 0x10000}, {&(0x7f0000010600)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010007ae770325132510000e770325103", 0x5b, 0x11000}, {&(0x7f0000010800)="2e2020202020202020202010007ae770325132510000e77032510300000000002e2e20202020202020202010", 0x2c, 0x15000}], 0x0, &(0x7f0000000080)=ANY=[])
r1 = dup(r0)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

11:53:27 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x1ff00000000000})

11:53:27 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
fcntl$lock(r1, 0x7, &(0x7f0000000140))

11:53:27 executing program 4:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000100)='hfs\x00', 0x0)


VM DIAGNOSIS:
11:53:17  Registers:
info registers vcpu 0
RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88803f747698
R8 =0000000000000001 R9 =000000000000000a R10=000000000000003a R11=0000000000000001
R12=000000000000003a R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0
RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f8ff64c6700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8c48f636f4 CR3=000000001d4f2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f8ff90377c0 00007f8ff90377c8
YMM02=0000000000000000 0000000000000000 00007f8ff90377e0 00007f8ff90377c0
YMM03=0000000000000000 0000000000000000 00007f8ff90377c8 00007f8ff90377c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000118173 RBX=0000000000001000 RCX=ffffffff816d4095 RDX=ffff88800feab580
RSI=0000000000000000 RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffff88803f70f768
R8 =0000000000001000 R9 =0000000000000000 R10=0000000000001000 R11=0000000000000001
R12=0000000000000000 R13=ffff88801872edd0 R14=00007ffd9d921000 R15=ffff88801872edd0
RIP=ffffffff81461414 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7bb89676f4 CR3=000000001ede4000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000000000000000 0000ff0000000000
YMM02=0000000000000000 0000000000000000 000000ff00000000 00000000ff000000
YMM03=0000000000000000 0000000000000000 0000000000000000 000000ff00000000
YMM04=0000000000000000 0000000000000000 0000000000000000 ff00000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000