Warning: Permanently added '[localhost]:6480' (ECDSA) to the list of known hosts. 2022/09/15 12:01:22 fuzzer started 2022/09/15 12:01:22 dialing manager at localhost:36559 syzkaller login: [ 43.977674] cgroup: Unknown subsys name 'net' [ 44.090603] cgroup: Unknown subsys name 'rlimit' 2022/09/15 12:01:37 syscalls: 2215 2022/09/15 12:01:37 code coverage: enabled 2022/09/15 12:01:37 comparison tracing: enabled 2022/09/15 12:01:37 extra coverage: enabled 2022/09/15 12:01:37 setuid sandbox: enabled 2022/09/15 12:01:37 namespace sandbox: enabled 2022/09/15 12:01:37 Android sandbox: enabled 2022/09/15 12:01:37 fault injection: enabled 2022/09/15 12:01:37 leak checking: enabled 2022/09/15 12:01:37 net packet injection: enabled 2022/09/15 12:01:37 net device setup: enabled 2022/09/15 12:01:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/15 12:01:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/15 12:01:37 USB emulation: enabled 2022/09/15 12:01:37 hci packet injection: enabled 2022/09/15 12:01:37 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220915) 2022/09/15 12:01:37 802.15.4 emulation: enabled 2022/09/15 12:01:37 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/15 12:01:37 fetching corpus: 30, signal 22710/26185 (executing program) 2022/09/15 12:01:37 fetching corpus: 80, signal 35592/40394 (executing program) 2022/09/15 12:01:37 fetching corpus: 130, signal 40586/46756 (executing program) 2022/09/15 12:01:37 fetching corpus: 180, signal 44578/52084 (executing program) 2022/09/15 12:01:37 fetching corpus: 230, signal 53469/61922 (executing program) 2022/09/15 12:01:37 fetching corpus: 280, signal 63378/72449 (executing program) 2022/09/15 12:01:37 fetching corpus: 330, signal 69639/79462 (executing program) 2022/09/15 12:01:38 fetching corpus: 380, signal 75109/85635 (executing program) 2022/09/15 12:01:38 fetching corpus: 430, signal 80307/91468 (executing program) 2022/09/15 12:01:38 fetching corpus: 480, signal 83763/95617 (executing program) 2022/09/15 12:01:38 fetching corpus: 530, signal 87422/99892 (executing program) 2022/09/15 12:01:38 fetching corpus: 580, signal 90867/103922 (executing program) 2022/09/15 12:01:38 fetching corpus: 630, signal 93804/107404 (executing program) 2022/09/15 12:01:38 fetching corpus: 680, signal 97749/111694 (executing program) 2022/09/15 12:01:39 fetching corpus: 730, signal 100675/115140 (executing program) 2022/09/15 12:01:39 fetching corpus: 780, signal 103220/118104 (executing program) 2022/09/15 12:01:39 fetching corpus: 830, signal 106456/121626 (executing program) 2022/09/15 12:01:39 fetching corpus: 880, signal 109761/125092 (executing program) 2022/09/15 12:01:39 fetching corpus: 930, signal 112363/127918 (executing program) 2022/09/15 12:01:39 fetching corpus: 980, signal 116546/131973 (executing program) 2022/09/15 12:01:40 fetching corpus: 1030, signal 118812/134437 (executing program) 2022/09/15 12:01:40 fetching corpus: 1080, signal 119923/135983 (executing program) 2022/09/15 12:01:40 fetching corpus: 1130, signal 122373/138433 (executing program) 2022/09/15 12:01:40 fetching corpus: 1180, signal 124421/140596 (executing program) 2022/09/15 12:01:40 fetching corpus: 1230, signal 125568/142071 (executing program) 2022/09/15 12:01:40 fetching corpus: 1280, signal 127503/144048 (executing program) 2022/09/15 12:01:40 fetching corpus: 1330, signal 129853/146279 (executing program) 2022/09/15 12:01:40 fetching corpus: 1380, signal 131674/148059 (executing program) 2022/09/15 12:01:41 fetching corpus: 1430, signal 133690/149982 (executing program) 2022/09/15 12:01:41 fetching corpus: 1480, signal 136348/152355 (executing program) 2022/09/15 12:01:41 fetching corpus: 1530, signal 137762/153795 (executing program) 2022/09/15 12:01:41 fetching corpus: 1580, signal 140277/155880 (executing program) 2022/09/15 12:01:41 fetching corpus: 1630, signal 142606/157867 (executing program) 2022/09/15 12:01:41 fetching corpus: 1680, signal 144444/159552 (executing program) 2022/09/15 12:01:42 fetching corpus: 1730, signal 145647/160682 (executing program) 2022/09/15 12:01:42 fetching corpus: 1780, signal 147035/161934 (executing program) 2022/09/15 12:01:42 fetching corpus: 1830, signal 148295/163138 (executing program) 2022/09/15 12:01:42 fetching corpus: 1880, signal 149508/164175 (executing program) 2022/09/15 12:01:42 fetching corpus: 1930, signal 150847/165234 (executing program) 2022/09/15 12:01:42 fetching corpus: 1980, signal 152326/166392 (executing program) 2022/09/15 12:01:42 fetching corpus: 2030, signal 153317/167284 (executing program) 2022/09/15 12:01:43 fetching corpus: 2080, signal 155175/168609 (executing program) 2022/09/15 12:01:43 fetching corpus: 2130, signal 155859/169264 (executing program) 2022/09/15 12:01:43 fetching corpus: 2180, signal 157230/170323 (executing program) 2022/09/15 12:01:43 fetching corpus: 2230, signal 158711/171353 (executing program) 2022/09/15 12:01:43 fetching corpus: 2280, signal 160151/172431 (executing program) 2022/09/15 12:01:43 fetching corpus: 2330, signal 160645/172972 (executing program) 2022/09/15 12:01:43 fetching corpus: 2380, signal 162400/174005 (executing program) 2022/09/15 12:01:44 fetching corpus: 2430, signal 163162/174603 (executing program) 2022/09/15 12:01:44 fetching corpus: 2480, signal 164338/175375 (executing program) 2022/09/15 12:01:44 fetching corpus: 2530, signal 165189/175934 (executing program) 2022/09/15 12:01:44 fetching corpus: 2580, signal 166187/176544 (executing program) 2022/09/15 12:01:44 fetching corpus: 2630, signal 167396/177212 (executing program) 2022/09/15 12:01:44 fetching corpus: 2680, signal 169222/178062 (executing program) 2022/09/15 12:01:44 fetching corpus: 2730, signal 170080/178580 (executing program) 2022/09/15 12:01:45 fetching corpus: 2780, signal 170985/179062 (executing program) 2022/09/15 12:01:45 fetching corpus: 2830, signal 172106/179680 (executing program) 2022/09/15 12:01:45 fetching corpus: 2880, signal 173062/180171 (executing program) 2022/09/15 12:01:45 fetching corpus: 2930, signal 173958/180628 (executing program) 2022/09/15 12:01:45 fetching corpus: 2980, signal 174941/181102 (executing program) 2022/09/15 12:01:45 fetching corpus: 3030, signal 175681/181488 (executing program) 2022/09/15 12:01:45 fetching corpus: 3080, signal 176499/181889 (executing program) 2022/09/15 12:01:46 fetching corpus: 3130, signal 177462/182437 (executing program) 2022/09/15 12:01:46 fetching corpus: 3180, signal 178370/182940 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183075 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183143 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183201 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183277 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183362 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183425 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183489 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183552 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183623 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183696 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183765 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183825 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183897 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/183968 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184045 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184124 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184187 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184262 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184336 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184407 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184473 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184554 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184615 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184629 (executing program) 2022/09/15 12:01:46 fetching corpus: 3194, signal 178558/184629 (executing program) 2022/09/15 12:01:49 starting 8 fuzzer processes 12:01:49 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x12, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none}]}}}}, 0x1d) 12:01:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x400, 0x1}, {0x0, 0x3ff}]}, 0x18, 0x0) sendfile(r1, r2, 0x0, 0xffff) [ 70.212269] audit: type=1400 audit(1663243309.249:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:01:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000001440)={0x1f, 0x0, @any, 0xff, 0x1}, 0xe) 12:01:49 executing program 3: fspick(0xffffffffffffffff, 0x0, 0x9185d6b0983a8547) 12:01:49 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f00000003c0)={0x7fffffff}, 0x0) 12:01:49 executing program 7: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x3d}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = pidfd_open(r1, 0x0) dup(r5) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:01:49 executing program 6: prctl$PR_SET_FPEXC(0xc, 0x0) 12:01:49 executing program 5: syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040) [ 71.507407] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.509244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.510588] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.513706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.515562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.517070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.524540] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.638256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.639666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.642385] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.644312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.645763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.647172] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.648320] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.649805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.651060] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.652400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.653625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.654913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.658770] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.663117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.693141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.694491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.695704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.706570] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.708452] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.710284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.711874] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.713110] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.714269] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.718503] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.719951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.722232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.723689] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.725490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.725648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.727822] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.728777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.733741] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.747084] Bluetooth: hci7: HCI_REQ-0x0c1a [ 71.747814] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.780580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.782190] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.783530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.783539] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.783669] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.786817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.788094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.804931] Bluetooth: hci3: HCI_REQ-0x0c1a [ 71.807554] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.809991] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.814511] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.814773] Bluetooth: hci5: HCI_REQ-0x0c1a [ 71.835328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.836586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.850113] Bluetooth: hci2: HCI_REQ-0x0c1a [ 73.591727] Bluetooth: hci0: command 0x0409 tx timeout [ 73.783223] Bluetooth: hci7: command 0x0409 tx timeout [ 73.784074] Bluetooth: hci6: command 0x0409 tx timeout [ 73.847150] Bluetooth: hci5: command 0x0409 tx timeout [ 73.847797] Bluetooth: hci3: command 0x0409 tx timeout [ 73.848072] Bluetooth: hci4: command 0x0409 tx timeout [ 73.848892] Bluetooth: hci1: command 0x0409 tx timeout [ 73.911122] Bluetooth: hci2: command 0x0409 tx timeout [ 75.639095] Bluetooth: hci0: command 0x041b tx timeout [ 75.831199] Bluetooth: hci6: command 0x041b tx timeout [ 75.832356] Bluetooth: hci7: command 0x041b tx timeout [ 75.895179] Bluetooth: hci1: command 0x041b tx timeout [ 75.897393] Bluetooth: hci4: command 0x041b tx timeout [ 75.898620] Bluetooth: hci3: command 0x041b tx timeout [ 75.900965] Bluetooth: hci5: command 0x041b tx timeout [ 75.959189] Bluetooth: hci2: command 0x041b tx timeout [ 77.687128] Bluetooth: hci0: command 0x040f tx timeout [ 77.879080] Bluetooth: hci7: command 0x040f tx timeout [ 77.879667] Bluetooth: hci6: command 0x040f tx timeout [ 77.943130] Bluetooth: hci5: command 0x040f tx timeout [ 77.943796] Bluetooth: hci3: command 0x040f tx timeout [ 77.944296] Bluetooth: hci4: command 0x040f tx timeout [ 77.944762] Bluetooth: hci1: command 0x040f tx timeout [ 78.007065] Bluetooth: hci2: command 0x040f tx timeout [ 79.735133] Bluetooth: hci0: command 0x0419 tx timeout [ 79.927111] Bluetooth: hci6: command 0x0419 tx timeout [ 79.927849] Bluetooth: hci7: command 0x0419 tx timeout [ 79.991127] Bluetooth: hci1: command 0x0419 tx timeout [ 79.991545] Bluetooth: hci4: command 0x0419 tx timeout [ 79.991932] Bluetooth: hci3: command 0x0419 tx timeout [ 79.992436] Bluetooth: hci5: command 0x0419 tx timeout [ 80.055118] Bluetooth: hci2: command 0x0419 tx timeout [ 121.649509] audit: type=1400 audit(1663243360.687:7): avc: denied { open } for pid=3846 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.651092] audit: type=1400 audit(1663243360.687:8): avc: denied { kernel } for pid=3846 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.682560] ------------[ cut here ]------------ [ 121.682584] [ 121.682588] ====================================================== [ 121.682591] WARNING: possible circular locking dependency detected [ 121.682596] 6.0.0-rc5-next-20220915 #1 Not tainted [ 121.682602] ------------------------------------------------------ [ 121.682606] syz-executor.7/3847 is trying to acquire lock: [ 121.682612] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 121.682651] [ 121.682651] but task is already holding lock: [ 121.682654] ffff88800f7c4820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.682683] [ 121.682683] which lock already depends on the new lock. [ 121.682683] [ 121.682686] [ 121.682686] the existing dependency chain (in reverse order) is: [ 121.682690] [ 121.682690] -> #3 (&ctx->lock){....}-{2:2}: [ 121.682704] _raw_spin_lock+0x2a/0x40 [ 121.682722] __perf_event_task_sched_out+0x53b/0x18d0 [ 121.682734] __schedule+0xedd/0x2470 [ 121.682745] schedule+0xda/0x1b0 [ 121.682755] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.682776] syscall_exit_to_user_mode+0x19/0x40 [ 121.682795] do_syscall_64+0x48/0x90 [ 121.682809] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.682828] [ 121.682828] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 121.682842] _raw_spin_lock_nested+0x30/0x40 [ 121.682857] raw_spin_rq_lock_nested+0x1e/0x30 [ 121.682871] task_fork_fair+0x63/0x4d0 [ 121.682888] sched_cgroup_fork+0x3d0/0x540 [ 121.682903] copy_process+0x4183/0x6e20 [ 121.682913] kernel_clone+0xe7/0x890 [ 121.682923] user_mode_thread+0xad/0xf0 [ 121.682933] rest_init+0x24/0x250 [ 121.682950] arch_call_rest_init+0xf/0x14 [ 121.682963] start_kernel+0x4c1/0x4e6 [ 121.682973] secondary_startup_64_no_verify+0xe0/0xeb [ 121.682988] [ 121.682988] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 121.683004] _raw_spin_lock_irqsave+0x39/0x60 [ 121.683020] try_to_wake_up+0xab/0x1920 [ 121.683033] up+0x75/0xb0 [ 121.683045] __up_console_sem+0x6e/0x80 [ 121.683061] console_unlock+0x46a/0x590 [ 121.683078] vt_ioctl+0x2822/0x2ca0 [ 121.683091] tty_ioctl+0x7c4/0x1700 [ 121.683111] __x64_sys_ioctl+0x19a/0x210 [ 121.683128] do_syscall_64+0x3b/0x90 [ 121.683141] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.683159] [ 121.683159] -> #0 ((console_sem).lock){....}-{2:2}: [ 121.683172] __lock_acquire+0x2a02/0x5e70 [ 121.683189] lock_acquire+0x1a2/0x530 [ 121.683205] _raw_spin_lock_irqsave+0x39/0x60 [ 121.683221] down_trylock+0xe/0x70 [ 121.683233] __down_trylock_console_sem+0x3b/0xd0 [ 121.683250] vprintk_emit+0x16b/0x560 [ 121.683267] vprintk+0x84/0xa0 [ 121.683283] _printk+0xba/0xf1 [ 121.683303] report_bug.cold+0x72/0xab [ 121.683315] handle_bug+0x3c/0x70 [ 121.683329] exc_invalid_op+0x14/0x50 [ 121.683343] asm_exc_invalid_op+0x16/0x20 [ 121.683360] group_sched_out.part.0+0x2c7/0x460 [ 121.683370] ctx_sched_out+0x8f1/0xc10 [ 121.683382] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.683396] __schedule+0xedd/0x2470 [ 121.683408] schedule+0xda/0x1b0 [ 121.683417] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.683437] syscall_exit_to_user_mode+0x19/0x40 [ 121.683455] do_syscall_64+0x48/0x90 [ 121.683468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.683486] [ 121.683486] other info that might help us debug this: [ 121.683486] [ 121.683488] Chain exists of: [ 121.683488] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 121.683488] [ 121.683503] Possible unsafe locking scenario: [ 121.683503] [ 121.683506] CPU0 CPU1 [ 121.683508] ---- ---- [ 121.683511] lock(&ctx->lock); [ 121.683517] lock(&rq->__lock); [ 121.683523] lock(&ctx->lock); [ 121.683529] lock((console_sem).lock); [ 121.683535] [ 121.683535] *** DEADLOCK *** [ 121.683535] [ 121.683537] 2 locks held by syz-executor.7/3847: [ 121.683544] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 121.683569] #1: ffff88800f7c4820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.683597] [ 121.683597] stack backtrace: [ 121.683600] CPU: 0 PID: 3847 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220915 #1 [ 121.683613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.683621] Call Trace: [ 121.683625] [ 121.683629] dump_stack_lvl+0x8b/0xb3 [ 121.683645] check_noncircular+0x263/0x2e0 [ 121.683662] ? format_decode+0x26c/0xb50 [ 121.683678] ? print_circular_bug+0x450/0x450 [ 121.683695] ? enable_ptr_key_workfn+0x20/0x20 [ 121.683711] ? format_decode+0x26c/0xb50 [ 121.683727] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 121.683745] __lock_acquire+0x2a02/0x5e70 [ 121.683767] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 121.683790] lock_acquire+0x1a2/0x530 [ 121.683807] ? down_trylock+0xe/0x70 [ 121.683821] ? rcu_read_unlock+0x40/0x40 [ 121.683843] ? vprintk+0x84/0xa0 [ 121.683861] _raw_spin_lock_irqsave+0x39/0x60 [ 121.683877] ? down_trylock+0xe/0x70 [ 121.683891] down_trylock+0xe/0x70 [ 121.683904] ? vprintk+0x84/0xa0 [ 121.683922] __down_trylock_console_sem+0x3b/0xd0 [ 121.683940] vprintk_emit+0x16b/0x560 [ 121.683959] vprintk+0x84/0xa0 [ 121.683977] _printk+0xba/0xf1 [ 121.683996] ? record_print_text.cold+0x16/0x16 [ 121.684019] ? report_bug.cold+0x66/0xab [ 121.684033] ? group_sched_out.part.0+0x2c7/0x460 [ 121.684045] report_bug.cold+0x72/0xab [ 121.684060] handle_bug+0x3c/0x70 [ 121.684074] exc_invalid_op+0x14/0x50 [ 121.684090] asm_exc_invalid_op+0x16/0x20 [ 121.684108] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.684121] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.684132] RSP: 0018:ffff888017517c48 EFLAGS: 00010006 [ 121.684142] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.684149] RDX: ffff888020750000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 121.684157] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 121.684165] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800f7c4800 [ 121.684173] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 121.684184] ? group_sched_out.part.0+0x2c7/0x460 [ 121.684197] ? group_sched_out.part.0+0x2c7/0x460 [ 121.684210] ctx_sched_out+0x8f1/0xc10 [ 121.684222] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.684238] ? lock_is_held_type+0xd7/0x130 [ 121.684257] ? __perf_cgroup_move+0x160/0x160 [ 121.684269] ? set_next_entity+0x304/0x550 [ 121.684287] ? update_curr+0x267/0x740 [ 121.684306] ? lock_is_held_type+0xd7/0x130 [ 121.684325] __schedule+0xedd/0x2470 [ 121.684339] ? io_schedule_timeout+0x150/0x150 [ 121.684352] ? rcu_read_lock_sched_held+0x3e/0x80 [ 121.684373] schedule+0xda/0x1b0 [ 121.684385] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.684406] syscall_exit_to_user_mode+0x19/0x40 [ 121.684424] do_syscall_64+0x48/0x90 [ 121.684439] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.684458] RIP: 0033:0x7f8133a0fb19 [ 121.684466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.684477] RSP: 002b:00007f8130f85218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.684488] RAX: 0000000000000001 RBX: 00007f8133b22f68 RCX: 00007f8133a0fb19 [ 121.684495] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8133b22f6c [ 121.684503] RBP: 00007f8133b22f60 R08: 000000000000000e R09: 0000000000000000 [ 121.684510] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f8133b22f6c [ 121.684517] R13: 00007ffe7740503f R14: 00007f8130f85300 R15: 0000000000022000 [ 121.684530] [ 121.740020] WARNING: CPU: 0 PID: 3847 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 121.740699] Modules linked in: [ 121.740941] CPU: 0 PID: 3847 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220915 #1 [ 121.741537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.742367] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.742769] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.744119] RSP: 0018:ffff888017517c48 EFLAGS: 00010006 [ 121.744514] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.745040] RDX: ffff888020750000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 121.745565] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 121.746100] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800f7c4800 [ 121.746628] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 121.747164] FS: 00007f8130f85700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 121.747776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.748214] CR2: 00007fe8a5512310 CR3: 000000000dac8000 CR4: 0000000000350ef0 [ 121.748746] Call Trace: [ 121.748942] [ 121.749119] ctx_sched_out+0x8f1/0xc10 [ 121.749417] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.749815] ? lock_is_held_type+0xd7/0x130 [ 121.750145] ? __perf_cgroup_move+0x160/0x160 [ 121.750481] ? set_next_entity+0x304/0x550 [ 121.750811] ? update_curr+0x267/0x740 [ 121.751122] ? lock_is_held_type+0xd7/0x130 [ 121.751455] __schedule+0xedd/0x2470 [ 121.751743] ? io_schedule_timeout+0x150/0x150 [ 121.752091] ? rcu_read_lock_sched_held+0x3e/0x80 [ 121.752469] schedule+0xda/0x1b0 [ 121.752728] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.753104] syscall_exit_to_user_mode+0x19/0x40 [ 121.753468] do_syscall_64+0x48/0x90 [ 121.753754] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.754147] RIP: 0033:0x7f8133a0fb19 [ 121.754427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.755795] RSP: 002b:00007f8130f85218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.756365] RAX: 0000000000000001 RBX: 00007f8133b22f68 RCX: 00007f8133a0fb19 [ 121.756897] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8133b22f6c [ 121.757425] RBP: 00007f8133b22f60 R08: 000000000000000e R09: 0000000000000000 [ 121.757959] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f8133b22f6c [ 121.758487] R13: 00007ffe7740503f R14: 00007f8130f85300 R15: 0000000000022000 [ 121.759020] [ 121.759208] irq event stamp: 1026 [ 121.759469] hardirqs last enabled at (1025): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 121.760172] hardirqs last disabled at (1026): [] __schedule+0x1225/0x2470 [ 121.760794] softirqs last enabled at (758): [] __irq_exit_rcu+0x11b/0x180 [ 121.761426] softirqs last disabled at (375): [] __irq_exit_rcu+0x11b/0x180 [ 121.762055] ---[ end trace 0000000000000000 ]--- 12:02:40 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r0, 0x0, 0xee00) 12:02:40 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r0, 0x0, 0xee00) 12:02:41 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r0, 0x0, 0xee00) [ 122.043931] audit: type=1400 audit(1663243361.081:9): avc: denied { write } for pid=3846 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:02:41 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r0, 0x0, 0xee00) 12:02:41 executing program 6: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}], 0x1}, 0x0) 12:02:41 executing program 6: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}], 0x1}, 0x0) 12:02:41 executing program 6: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}], 0x1}, 0x0) 12:02:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x400, 0x1}, {0x0, 0x3ff}]}, 0x18, 0x0) sendfile(r1, r2, 0x0, 0xffff) 12:02:42 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x12, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none}]}}}}, 0x1d) 12:02:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000001440)={0x1f, 0x0, @any, 0xff, 0x1}, 0xe) 12:02:42 executing program 5: syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040) 12:02:42 executing program 3: fspick(0xffffffffffffffff, 0x0, 0x9185d6b0983a8547) 12:02:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x400, 0x1}, {0x0, 0x3ff}]}, 0x18, 0x0) sendfile(r1, r2, 0x0, 0xffff) 12:02:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000001440)={0x1f, 0x0, @any, 0xff, 0x1}, 0xe) 12:02:42 executing program 6: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}], 0x1}, 0x0) 12:02:42 executing program 7: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x3d}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = pidfd_open(r1, 0x0) dup(r5) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:42 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x12, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none}]}}}}, 0x1d) 12:02:42 executing program 5: syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040) 12:02:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x400, 0x1}, {0x0, 0x3ff}]}, 0x18, 0x0) sendfile(r1, r2, 0x0, 0xffff) 12:02:42 executing program 3: fspick(0xffffffffffffffff, 0x0, 0x9185d6b0983a8547) 12:02:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000001440)={0x1f, 0x0, @any, 0xff, 0x1}, 0xe) 12:02:42 executing program 6: syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040) 12:02:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000001440)={0x1f, 0x0, @any, 0xff, 0x1}, 0xe) 12:02:42 executing program 7: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x3d}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = pidfd_open(r1, 0x0) dup(r5) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000001440)={0x1f, 0x0, @any, 0xff, 0x1}, 0xe) 12:02:42 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x12, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none}]}}}}, 0x1d) 12:02:42 executing program 3: fspick(0xffffffffffffffff, 0x0, 0x9185d6b0983a8547) 12:02:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000001440)={0x1f, 0x0, @any, 0xff, 0x1}, 0xe) [ 123.595028] hrtimer: interrupt took 25869 ns 12:02:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c03, 0xffffffffffffffff) 12:02:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x400, 0x1}, {0x0, 0x3ff}]}, 0x18, 0x0) sendfile(r1, r2, 0x0, 0xffff) 12:02:42 executing program 3: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "be80b90ae0c74c556cd5e9c03fd442fd41e3e64b6abaea34bc63984a5662eacc09b514d4b567dadf0deceaa11421027662dec117d813d43a59bc99b545ebc135"}, 0x48, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) 12:02:42 executing program 5: syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040) 12:02:42 executing program 6: syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040) 12:02:42 executing program 7: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x3d}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = pidfd_open(r1, 0x0) dup(r5) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {0x0}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 12:02:42 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 12:02:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c03, 0xffffffffffffffff) 12:02:42 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 12:02:42 executing program 3: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "be80b90ae0c74c556cd5e9c03fd442fd41e3e64b6abaea34bc63984a5662eacc09b514d4b567dadf0deceaa11421027662dec117d813d43a59bc99b545ebc135"}, 0x48, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) [ 123.904158] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:02:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x400, 0x1}, {0x0, 0x3ff}]}, 0x18, 0x0) sendfile(r1, r2, 0x0, 0xffff) [ 123.925472] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 123.932464] syz-executor.4 (4038) used greatest stack depth: 22680 bytes left 12:02:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c03, 0xffffffffffffffff) 12:02:43 executing program 6: syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040) 12:02:43 executing program 3: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "be80b90ae0c74c556cd5e9c03fd442fd41e3e64b6abaea34bc63984a5662eacc09b514d4b567dadf0deceaa11421027662dec117d813d43a59bc99b545ebc135"}, 0x48, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) 12:02:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {0x0}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 12:02:43 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 124.066342] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:02:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c03, 0xffffffffffffffff) 12:02:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {0x0}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 12:02:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x400, 0x1}, {0x0, 0x3ff}]}, 0x18, 0x0) sendfile(r1, r2, 0x0, 0xffff) 12:02:43 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 12:02:43 executing program 3: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "be80b90ae0c74c556cd5e9c03fd442fd41e3e64b6abaea34bc63984a5662eacc09b514d4b567dadf0deceaa11421027662dec117d813d43a59bc99b545ebc135"}, 0x48, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) 12:02:43 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 124.225801] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:02:43 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 12:02:43 executing program 7: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 12:02:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) 12:02:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x26, 0x8000000}}) 12:02:43 executing program 1: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 7: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 12:02:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) 12:02:43 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 12:02:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {0x0}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 12:02:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x26, 0x8000000}}) [ 124.406304] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:02:43 executing program 7: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 12:02:43 executing program 1: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x26, 0x8000000}}) 12:02:43 executing program 0: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) 12:02:43 executing program 3: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 5: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x13, 0x32, 0xe21, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) 12:02:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) 12:02:43 executing program 1: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x13, 0x32, 0xe21, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) 12:02:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x26, 0x8000000}}) 12:02:43 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0) 12:02:43 executing program 5: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0) 12:02:43 executing program 0: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x13, 0x32, 0xe21, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) 12:02:43 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x1, 0x39, 0x0, 0x0, 0x40, 0x28002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x960, 0x0, 0x0, 0x1ff, 0x3, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:02:43 executing program 3: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 1: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 5: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:43 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0) 12:02:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x13, 0x32, 0xe21, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) 12:02:43 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0) 12:02:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0xc, &(0x7f0000000000)=[@timestamp, @window, @sack_perm, @sack_perm], 0x4) 12:02:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0xc, &(0x7f0000000000)=[@timestamp, @window, @sack_perm, @sack_perm], 0x4) 12:02:43 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x1, 0x39, 0x0, 0x0, 0x40, 0x28002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x960, 0x0, 0x0, 0x1ff, 0x3, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:02:44 executing program 3: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0xc, &(0x7f0000000000)=[@timestamp, @window, @sack_perm, @sack_perm], 0x4) 12:02:44 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x1, 0x39, 0x0, 0x0, 0x40, 0x28002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x960, 0x0, 0x0, 0x1ff, 0x3, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:02:44 executing program 0: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='}\x00', &(0x7f0000000180)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\xdf\xff\xff\xff\xff\xff\xff\xffKm\x11\xecp\xbf\xdf0\xf1v \x8f\xb0\xb63!\xb5kx\x9cP\xaf\'T\xc0Nk\x05#\xca\xe44\xfb/\xb0\"\x0e\x8c\x9aX=\xaaR\xdcy\a6\xba<\xeeP\x83Y\xf1r\x89\x982\x81\xb2f\x8b\xb8\x04H^\xa8Hg\xa9\xa7\xe23\xac2\xc7\xd4\xb4h:Tg\xbc\x03J\xbd\xc8\xab\\\tqm\xe5\x83\x162l\x813\x13\x8e\xd5R\x1f\x02m\x8b\x13\x19\xa0\x84Y\xc7\xa8\xd1\xf0Vn\xe0\x94\xf4\xbe\x01\xb7\xa4', &(0x7f00000003c0)='@\x00', 0x0) fallocate(r0, 0x8, 0x3, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES64=r1, @ANYRES32=r6]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:02:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0xc, &(0x7f0000000000)=[@timestamp, @window, @sack_perm, @sack_perm], 0x4) 12:02:44 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x1, 0x39, 0x0, 0x0, 0x40, 0x28002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x960, 0x0, 0x0, 0x1ff, 0x3, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:02:44 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x1, 0x39, 0x0, 0x0, 0x40, 0x28002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x960, 0x0, 0x0, 0x1ff, 0x3, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:02:44 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x1, 0x39, 0x0, 0x0, 0x40, 0x28002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x960, 0x0, 0x0, 0x1ff, 0x3, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:02:44 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 12:02:44 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0) write(r0, &(0x7f0000000300)='2l', 0x2) 12:02:44 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x401c5820, 0x0) 12:02:44 executing program 0: syz_open_dev$vcsn(&(0x7f00000037c0), 0x0, 0x0) 12:02:44 executing program 0: finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, 0xfffffffffffffffc) 12:02:44 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@link_local]}) 12:02:44 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x1, 0x39, 0x0, 0x0, 0x40, 0x28002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x960, 0x0, 0x0, 0x1ff, 0x3, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:02:44 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x401c5820, 0x0) 12:02:44 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0) write(r0, &(0x7f0000000300)='2l', 0x2) 12:02:44 executing program 0: finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, 0xfffffffffffffffc) 12:02:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) 12:02:44 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x1, 0x39, 0x0, 0x0, 0x40, 0x28002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x960, 0x0, 0x0, 0x1ff, 0x3, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:02:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:02:44 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@link_local]}) 12:02:44 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0) write(r0, &(0x7f0000000300)='2l', 0x2) 12:02:44 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x401c5820, 0x0) 12:02:44 executing program 0: finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, 0xfffffffffffffffc) 12:02:44 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x1, 0x39, 0x0, 0x0, 0x40, 0x28002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x960, 0x0, 0x0, 0x1ff, 0x3, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:02:44 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x1, 0x39, 0x0, 0x0, 0x40, 0x28002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x960, 0x0, 0x0, 0x1ff, 0x3, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:02:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:02:44 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@link_local]}) 12:02:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) 12:02:44 executing program 0: finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, 0xfffffffffffffffc) 12:02:44 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0) write(r0, &(0x7f0000000300)='2l', 0x2) 12:02:44 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x401c5820, 0x0) 12:02:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) 12:02:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:02:44 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@link_local]}) [ 125.857205] netlink: 'syz-executor.6': attribute type 11 has an invalid length. 12:02:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x5bc8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x74c4, 0x4) 12:02:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 12:02:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 12:02:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:02:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000001380)) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc, 0x6, @device_b}]}, 0x28}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r2, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r5, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @broadcast}}}], 0x20}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @loopback, 0x0}, &(0x7f00000011c0)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xe8, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0xe8}}, 0x800) 12:02:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) 12:02:44 executing program 2: r0 = gettid() setpgid(0x0, r0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8c, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x66b}, 0x52140, 0xfffffffffffffffd, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2000000}, r0, 0xd, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000080)="01", 0x41030) preadv(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x0, 0x0) 12:02:44 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004a00)) 12:02:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 12:02:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x5bc8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x74c4, 0x4) 12:02:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x5bc8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x74c4, 0x4) 12:02:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 12:02:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 12:02:45 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x6546, &(0x7f00000031c0), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x3459, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:02:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) 12:02:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x5bc8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x74c4, 0x4) 12:02:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x5bc8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x74c4, 0x4) 12:02:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) [ 126.164675] netlink: 'syz-executor.6': attribute type 11 has an invalid length. 12:02:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 12:02:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 12:02:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x5bc8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x74c4, 0x4) 12:02:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x5bc8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x74c4, 0x4) 12:02:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) 12:02:45 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x6546, &(0x7f00000031c0), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x3459, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:02:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000001380)) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc, 0x6, @device_b}]}, 0x28}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r2, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r5, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @broadcast}}}], 0x20}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @loopback, 0x0}, &(0x7f00000011c0)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xe8, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0xe8}}, 0x800) 12:02:45 executing program 2: r0 = gettid() setpgid(0x0, r0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8c, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x66b}, 0x52140, 0xfffffffffffffffd, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2000000}, r0, 0xd, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000080)="01", 0x41030) preadv(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x0, 0x0) [ 126.380364] netlink: 'syz-executor.6': attribute type 11 has an invalid length. 12:02:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000001380)) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc, 0x6, @device_b}]}, 0x28}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r2, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r5, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @broadcast}}}], 0x20}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @loopback, 0x0}, &(0x7f00000011c0)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xe8, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ VM DIAGNOSIS: 12:02:41 Registers: info registers vcpu 0 RAX=000000000000007d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff888017517698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000007d R11=0000000000000001 R12=000000000000007d R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0 RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8130f85700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe8a5512310 CR3=000000000dac8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f8133af67c0 00007f8133af67c8 YMM02=0000000000000000 0000000000000000 00007f8133af67e0 00007f8133af67c0 YMM03=0000000000000000 0000000000000000 00007f8133af67c8 00007f8133af67c0 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffff88800db99040 RBX=ffff88800e5479b8 RCX=ffffffff812aaa31 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88800e5479f0 RBP=ffff88800db99000 RSP=ffff88803e36f890 R8 =0000000000000001 R9 =ffff88803e36f833 R10=ffffed1007c6df06 R11=0000000000000001 R12=dffffc0000000000 R13=ffff88800e780800 R14=0000000000000000 R15=ffff88800e780800 RIP=ffffffff817bcadb RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f948eca1540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f948ed72710 CR3=000000003e39a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000ff0000000000 000000000000ff00 YMM01=0000000000000000 0000000000000000 ffff00ffffffffff ffffffffffff00ff YMM02=0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000470035 YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000