Warning: Permanently added '[localhost]:19488' (ECDSA) to the list of known hosts. 2022/09/15 12:31:53 fuzzer started 2022/09/15 12:31:54 dialing manager at localhost:36559 syzkaller login: [ 37.430776] cgroup: Unknown subsys name 'net' [ 37.546693] cgroup: Unknown subsys name 'rlimit' 2022/09/15 12:32:08 syscalls: 2215 2022/09/15 12:32:08 code coverage: enabled 2022/09/15 12:32:08 comparison tracing: enabled 2022/09/15 12:32:08 extra coverage: enabled 2022/09/15 12:32:08 setuid sandbox: enabled 2022/09/15 12:32:08 namespace sandbox: enabled 2022/09/15 12:32:08 Android sandbox: enabled 2022/09/15 12:32:08 fault injection: enabled 2022/09/15 12:32:08 leak checking: enabled 2022/09/15 12:32:08 net packet injection: enabled 2022/09/15 12:32:08 net device setup: enabled 2022/09/15 12:32:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/15 12:32:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/15 12:32:08 USB emulation: enabled 2022/09/15 12:32:08 hci packet injection: enabled 2022/09/15 12:32:08 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220915) 2022/09/15 12:32:08 802.15.4 emulation: enabled 2022/09/15 12:32:08 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/15 12:32:08 fetching corpus: 31, signal 25593/29071 (executing program) 2022/09/15 12:32:08 fetching corpus: 76, signal 36544/41457 (executing program) 2022/09/15 12:32:09 fetching corpus: 126, signal 46907/53060 (executing program) 2022/09/15 12:32:09 fetching corpus: 176, signal 58406/65478 (executing program) 2022/09/15 12:32:09 fetching corpus: 226, signal 63567/71786 (executing program) 2022/09/15 12:32:09 fetching corpus: 276, signal 68745/77980 (executing program) 2022/09/15 12:32:09 fetching corpus: 326, signal 72180/82487 (executing program) 2022/09/15 12:32:09 fetching corpus: 376, signal 77188/88314 (executing program) 2022/09/15 12:32:10 fetching corpus: 426, signal 83389/95125 (executing program) 2022/09/15 12:32:10 fetching corpus: 476, signal 87883/100325 (executing program) 2022/09/15 12:32:10 fetching corpus: 526, signal 91332/104509 (executing program) 2022/09/15 12:32:10 fetching corpus: 576, signal 94848/108661 (executing program) 2022/09/15 12:32:10 fetching corpus: 626, signal 97981/112452 (executing program) 2022/09/15 12:32:10 fetching corpus: 676, signal 102971/117753 (executing program) 2022/09/15 12:32:10 fetching corpus: 726, signal 107116/122232 (executing program) 2022/09/15 12:32:11 fetching corpus: 776, signal 109942/125552 (executing program) 2022/09/15 12:32:11 fetching corpus: 826, signal 111950/128127 (executing program) 2022/09/15 12:32:11 fetching corpus: 876, signal 114156/130886 (executing program) 2022/09/15 12:32:11 fetching corpus: 926, signal 115652/132972 (executing program) 2022/09/15 12:32:11 fetching corpus: 976, signal 117943/135748 (executing program) 2022/09/15 12:32:11 fetching corpus: 1026, signal 121801/139763 (executing program) 2022/09/15 12:32:11 fetching corpus: 1076, signal 123986/142317 (executing program) 2022/09/15 12:32:11 fetching corpus: 1126, signal 126313/144887 (executing program) 2022/09/15 12:32:11 fetching corpus: 1176, signal 127827/146841 (executing program) 2022/09/15 12:32:12 fetching corpus: 1226, signal 130247/149491 (executing program) 2022/09/15 12:32:12 fetching corpus: 1276, signal 131930/151467 (executing program) 2022/09/15 12:32:12 fetching corpus: 1326, signal 133887/153647 (executing program) 2022/09/15 12:32:12 fetching corpus: 1376, signal 135223/155368 (executing program) 2022/09/15 12:32:12 fetching corpus: 1426, signal 136776/157216 (executing program) 2022/09/15 12:32:12 fetching corpus: 1476, signal 137742/158556 (executing program) 2022/09/15 12:32:12 fetching corpus: 1526, signal 139672/160599 (executing program) 2022/09/15 12:32:12 fetching corpus: 1576, signal 140762/161991 (executing program) 2022/09/15 12:32:13 fetching corpus: 1626, signal 142319/163723 (executing program) 2022/09/15 12:32:13 fetching corpus: 1676, signal 143714/165260 (executing program) 2022/09/15 12:32:13 fetching corpus: 1726, signal 144810/166528 (executing program) 2022/09/15 12:32:13 fetching corpus: 1776, signal 146734/168381 (executing program) 2022/09/15 12:32:13 fetching corpus: 1826, signal 147914/169711 (executing program) 2022/09/15 12:32:13 fetching corpus: 1876, signal 149488/171250 (executing program) 2022/09/15 12:32:13 fetching corpus: 1926, signal 150493/172401 (executing program) 2022/09/15 12:32:14 fetching corpus: 1976, signal 151545/173631 (executing program) 2022/09/15 12:32:14 fetching corpus: 2026, signal 152970/175018 (executing program) 2022/09/15 12:32:14 fetching corpus: 2076, signal 154337/176340 (executing program) 2022/09/15 12:32:14 fetching corpus: 2126, signal 155669/177601 (executing program) 2022/09/15 12:32:14 fetching corpus: 2176, signal 157102/178911 (executing program) 2022/09/15 12:32:14 fetching corpus: 2226, signal 158926/180395 (executing program) 2022/09/15 12:32:14 fetching corpus: 2276, signal 160027/181396 (executing program) 2022/09/15 12:32:15 fetching corpus: 2326, signal 160973/182329 (executing program) 2022/09/15 12:32:15 fetching corpus: 2376, signal 161858/183216 (executing program) 2022/09/15 12:32:15 fetching corpus: 2426, signal 163256/184394 (executing program) 2022/09/15 12:32:15 fetching corpus: 2476, signal 164062/185202 (executing program) 2022/09/15 12:32:15 fetching corpus: 2526, signal 164857/185979 (executing program) 2022/09/15 12:32:15 fetching corpus: 2576, signal 165834/186975 (executing program) 2022/09/15 12:32:15 fetching corpus: 2626, signal 166724/187804 (executing program) 2022/09/15 12:32:15 fetching corpus: 2676, signal 167872/188723 (executing program) 2022/09/15 12:32:16 fetching corpus: 2726, signal 168765/189462 (executing program) 2022/09/15 12:32:16 fetching corpus: 2776, signal 169978/190481 (executing program) 2022/09/15 12:32:16 fetching corpus: 2826, signal 170940/191256 (executing program) 2022/09/15 12:32:16 fetching corpus: 2876, signal 172974/192386 (executing program) 2022/09/15 12:32:16 fetching corpus: 2926, signal 173823/193068 (executing program) 2022/09/15 12:32:16 fetching corpus: 2976, signal 174714/193766 (executing program) 2022/09/15 12:32:16 fetching corpus: 3026, signal 175556/194436 (executing program) 2022/09/15 12:32:17 fetching corpus: 3076, signal 176701/195220 (executing program) 2022/09/15 12:32:17 fetching corpus: 3126, signal 177553/195851 (executing program) 2022/09/15 12:32:17 fetching corpus: 3176, signal 179218/196765 (executing program) 2022/09/15 12:32:17 fetching corpus: 3226, signal 180030/197328 (executing program) 2022/09/15 12:32:17 fetching corpus: 3276, signal 180611/197778 (executing program) 2022/09/15 12:32:17 fetching corpus: 3326, signal 181237/198239 (executing program) 2022/09/15 12:32:18 fetching corpus: 3376, signal 182395/198859 (executing program) 2022/09/15 12:32:18 fetching corpus: 3426, signal 183477/199453 (executing program) 2022/09/15 12:32:18 fetching corpus: 3476, signal 184356/200028 (executing program) 2022/09/15 12:32:18 fetching corpus: 3526, signal 185350/200522 (executing program) 2022/09/15 12:32:18 fetching corpus: 3576, signal 186129/200927 (executing program) 2022/09/15 12:32:18 fetching corpus: 3626, signal 186815/201296 (executing program) 2022/09/15 12:32:18 fetching corpus: 3676, signal 187401/201633 (executing program) 2022/09/15 12:32:18 fetching corpus: 3726, signal 187940/202015 (executing program) 2022/09/15 12:32:19 fetching corpus: 3776, signal 189016/202433 (executing program) 2022/09/15 12:32:19 fetching corpus: 3826, signal 189570/202760 (executing program) 2022/09/15 12:32:19 fetching corpus: 3876, signal 190355/203388 (executing program) 2022/09/15 12:32:19 fetching corpus: 3926, signal 191425/203796 (executing program) 2022/09/15 12:32:19 fetching corpus: 3976, signal 192203/204087 (executing program) 2022/09/15 12:32:19 fetching corpus: 4026, signal 192885/204368 (executing program) 2022/09/15 12:32:19 fetching corpus: 4076, signal 193344/204575 (executing program) 2022/09/15 12:32:20 fetching corpus: 4126, signal 194293/204869 (executing program) 2022/09/15 12:32:20 fetching corpus: 4176, signal 195137/205125 (executing program) 2022/09/15 12:32:20 fetching corpus: 4226, signal 195658/205387 (executing program) 2022/09/15 12:32:20 fetching corpus: 4276, signal 196649/205640 (executing program) 2022/09/15 12:32:20 fetching corpus: 4326, signal 197249/205843 (executing program) 2022/09/15 12:32:20 fetching corpus: 4376, signal 198032/206049 (executing program) 2022/09/15 12:32:20 fetching corpus: 4426, signal 198602/206210 (executing program) 2022/09/15 12:32:20 fetching corpus: 4476, signal 199418/206515 (executing program) 2022/09/15 12:32:21 fetching corpus: 4526, signal 199858/206645 (executing program) 2022/09/15 12:32:21 fetching corpus: 4576, signal 200640/206824 (executing program) 2022/09/15 12:32:21 fetching corpus: 4618, signal 201148/206964 (executing program) 2022/09/15 12:32:21 fetching corpus: 4619, signal 201149/207035 (executing program) 2022/09/15 12:32:21 fetching corpus: 4619, signal 201149/207112 (executing program) 2022/09/15 12:32:21 fetching corpus: 4619, signal 201149/207177 (executing program) 2022/09/15 12:32:21 fetching corpus: 4619, signal 201149/207251 (executing program) 2022/09/15 12:32:21 fetching corpus: 4619, signal 201149/207323 (executing program) 2022/09/15 12:32:21 fetching corpus: 4619, signal 201149/207337 (executing program) 2022/09/15 12:32:21 fetching corpus: 4619, signal 201149/207337 (executing program) 2022/09/15 12:32:24 starting 8 fuzzer processes 12:32:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) 12:32:24 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000003240)='fdinfo/4\x00') 12:32:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x18, 0x0, 0x101, 0x0, 0x0, {0xa, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}}, 0x0) [ 67.407214] audit: type=1400 audit(1663245144.277:6): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:32:24 executing program 3: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000018c0)) 12:32:24 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') getcwd(0x0, 0xffffffffffffff4f) 12:32:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x17) 12:32:24 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 12:32:24 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') pread64(r0, &(0x7f0000000000)=""/13, 0xd, 0xff) [ 68.805071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.806715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.809945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.811136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.812765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.814912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.817859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.820368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.833062] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.834967] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.836298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.837694] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.839246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.840590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.844951] Bluetooth: hci2: HCI_REQ-0x0c1a [ 68.852296] Bluetooth: hci0: HCI_REQ-0x0c1a [ 68.869653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.870059] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.872818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.873918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.875732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.877162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.879249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.884188] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.885620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.886801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.902431] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.905150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.906878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.908911] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.911204] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.915929] Bluetooth: hci3: HCI_REQ-0x0c1a [ 68.924529] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.930690] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.943750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.945255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.948976] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 68.950310] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.953111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.954911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.957982] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.972601] Bluetooth: hci1: HCI_REQ-0x0c1a [ 68.987966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.996305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.999062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.002819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.017602] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.018927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.047642] Bluetooth: hci5: HCI_REQ-0x0c1a [ 70.870027] Bluetooth: hci0: command 0x0409 tx timeout [ 70.870057] Bluetooth: hci2: command 0x0409 tx timeout [ 70.933494] Bluetooth: hci4: command 0x0409 tx timeout [ 70.933969] Bluetooth: hci3: command 0x0409 tx timeout [ 70.934636] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 70.997410] Bluetooth: hci1: command 0x0409 tx timeout [ 70.997445] Bluetooth: hci6: command 0x0409 tx timeout [ 71.125400] Bluetooth: hci5: command 0x0409 tx timeout [ 72.918817] Bluetooth: hci2: command 0x041b tx timeout [ 72.919624] Bluetooth: hci0: command 0x041b tx timeout [ 72.982464] Bluetooth: hci3: command 0x041b tx timeout [ 72.983247] Bluetooth: hci4: command 0x041b tx timeout [ 73.045547] Bluetooth: hci6: command 0x041b tx timeout [ 73.046670] Bluetooth: hci1: command 0x041b tx timeout [ 73.173701] Bluetooth: hci5: command 0x041b tx timeout [ 74.158230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.159977] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.181679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.186913] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.190383] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.199320] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.212066] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.965522] Bluetooth: hci0: command 0x040f tx timeout [ 74.966175] Bluetooth: hci2: command 0x040f tx timeout [ 75.029469] Bluetooth: hci4: command 0x040f tx timeout [ 75.029946] Bluetooth: hci3: command 0x040f tx timeout [ 75.093465] Bluetooth: hci1: command 0x040f tx timeout [ 75.094102] Bluetooth: hci6: command 0x040f tx timeout [ 75.235405] Bluetooth: hci5: command 0x040f tx timeout [ 76.245435] Bluetooth: hci7: command 0x0409 tx timeout [ 77.013761] Bluetooth: hci2: command 0x0419 tx timeout [ 77.014295] Bluetooth: hci0: command 0x0419 tx timeout [ 77.078116] Bluetooth: hci3: command 0x0419 tx timeout [ 77.078569] Bluetooth: hci4: command 0x0419 tx timeout [ 77.141395] Bluetooth: hci6: command 0x0419 tx timeout [ 77.141833] Bluetooth: hci1: command 0x0419 tx timeout [ 77.269419] Bluetooth: hci5: command 0x0419 tx timeout [ 78.293617] Bluetooth: hci7: command 0x041b tx timeout [ 80.341592] Bluetooth: hci7: command 0x040f tx timeout [ 82.389520] Bluetooth: hci7: command 0x0419 tx timeout 12:33:21 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') getcwd(0x0, 0xffffffffffffff4f) 12:33:21 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') getcwd(0x0, 0xffffffffffffff4f) 12:33:21 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') getcwd(0x0, 0xffffffffffffff4f) 12:33:21 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') getcwd(0x0, 0xffffffffffffff4f) 12:33:21 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') getcwd(0x0, 0xffffffffffffff4f) 12:33:21 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') getcwd(0x0, 0xffffffffffffff4f) 12:33:21 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io'}, 0xb) [ 125.101065] pci 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem 12:33:22 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io'}, 0xb) [ 125.223819] pci 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 129.760314] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.762574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.763748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.766932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.768887] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.770760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.774415] Bluetooth: hci1: HCI_REQ-0x0c1a [ 131.797385] Bluetooth: hci1: command 0x0409 tx timeout [ 133.845529] Bluetooth: hci1: command 0x041b tx timeout [ 135.893438] Bluetooth: hci1: command 0x040f tx timeout [ 137.941667] Bluetooth: hci1: command 0x0419 tx timeout 12:33:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) 12:33:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x17) 12:33:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x18, 0x0, 0x101, 0x0, 0x0, {0xa, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}}, 0x0) 12:33:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') pread64(r0, &(0x7f0000000000)=""/13, 0xd, 0xff) 12:33:45 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 12:33:45 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000003240)='fdinfo/4\x00') 12:33:45 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io'}, 0xb) 12:33:45 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io'}, 0xb) 12:33:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x17) [ 148.610768] pci 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 148.612869] pci 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem 12:33:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) 12:33:45 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io'}, 0xb) 12:33:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x18, 0x0, 0x101, 0x0, 0x0, {0xa, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}}, 0x0) 12:33:45 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io'}, 0xb) 12:33:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') pread64(r0, &(0x7f0000000000)=""/13, 0xd, 0xff) 12:33:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x17) 12:33:45 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000003240)='fdinfo/4\x00') 12:33:45 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) [ 148.817599] pci 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 148.852256] pci 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem 12:33:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x18, 0x0, 0x101, 0x0, 0x0, {0xa, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}}, 0x0) 12:33:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) 12:33:45 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 12:33:45 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000003240)='fdinfo/4\x00') 12:33:45 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io'}, 0xb) [ 149.059943] pci 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem 12:33:45 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0xffe0000) 12:33:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2283, &(0x7f0000000000)) 12:33:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') pread64(r0, &(0x7f0000000000)=""/13, 0xd, 0xff) 12:33:45 executing program 4: syz_open_dev$sg(&(0x7f0000000900), 0x0, 0x181680) 12:33:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) [ 149.086116] audit: type=1400 audit(1663245225.956:7): avc: denied { open } for pid=4457 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 149.088966] audit: type=1400 audit(1663245225.956:8): avc: denied { kernel } for pid=4457 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 149.097020] loop2: detected capacity change from 0 to 40 [ 149.118588] ------------[ cut here ]------------ [ 149.118627] [ 149.118632] ====================================================== [ 149.118639] WARNING: possible circular locking dependency detected [ 149.118646] 6.0.0-rc5-next-20220915 #1 Not tainted [ 149.118659] ------------------------------------------------------ [ 149.118665] syz-executor.0/4466 is trying to acquire lock: [ 149.118677] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 149.118741] [ 149.118741] but task is already holding lock: [ 149.118746] ffff88800ee82c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 149.118798] [ 149.118798] which lock already depends on the new lock. [ 149.118798] [ 149.118804] [ 149.118804] the existing dependency chain (in reverse order) is: [ 149.118810] [ 149.118810] -> #3 (&ctx->lock){....}-{2:2}: [ 149.118837] _raw_spin_lock+0x2a/0x40 [ 149.118868] __perf_event_task_sched_out+0x53b/0x18d0 [ 149.118892] __schedule+0xedd/0x2470 [ 149.118913] schedule+0xda/0x1b0 [ 149.118932] exit_to_user_mode_prepare+0x114/0x1a0 [ 149.118970] syscall_exit_to_user_mode+0x19/0x40 [ 149.119004] do_syscall_64+0x48/0x90 [ 149.119030] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.119064] [ 149.119064] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 149.119091] _raw_spin_lock_nested+0x30/0x40 [ 149.119121] raw_spin_rq_lock_nested+0x1e/0x30 [ 149.119145] task_fork_fair+0x63/0x4d0 [ 149.119176] sched_cgroup_fork+0x3d0/0x540 [ 149.119203] copy_process+0x4183/0x6e20 [ 149.119223] kernel_clone+0xe7/0x890 [ 149.119241] user_mode_thread+0xad/0xf0 [ 149.119261] rest_init+0x24/0x250 [ 149.119293] arch_call_rest_init+0xf/0x14 [ 149.119315] start_kernel+0x4c1/0x4e6 [ 149.119335] secondary_startup_64_no_verify+0xe0/0xeb [ 149.119361] [ 149.119361] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 149.119388] _raw_spin_lock_irqsave+0x39/0x60 [ 149.119418] try_to_wake_up+0xab/0x1920 [ 149.119443] up+0x75/0xb0 [ 149.119465] __up_console_sem+0x6e/0x80 [ 149.119495] console_unlock+0x46a/0x590 [ 149.119526] vprintk_emit+0x1bd/0x560 [ 149.119557] vprintk+0x84/0xa0 [ 149.119588] _printk+0xba/0xf1 [ 149.119621] kauditd_hold_skb.cold+0x3f/0x4e [ 149.119649] kauditd_send_queue+0x233/0x290 [ 149.119676] kauditd_thread+0x5da/0x9a0 [ 149.119703] kthread+0x2ed/0x3a0 [ 149.119730] ret_from_fork+0x22/0x30 [ 149.119754] [ 149.119754] -> #0 ((console_sem).lock){....}-{2:2}: [ 149.119781] __lock_acquire+0x2a02/0x5e70 [ 149.119812] lock_acquire+0x1a2/0x530 [ 149.119846] _raw_spin_lock_irqsave+0x39/0x60 [ 149.119885] down_trylock+0xe/0x70 [ 149.119915] __down_trylock_console_sem+0x3b/0xd0 [ 149.119953] vprintk_emit+0x16b/0x560 [ 149.119986] vprintk+0x84/0xa0 [ 149.120019] _printk+0xba/0xf1 [ 149.120053] report_bug.cold+0x72/0xab [ 149.120078] handle_bug+0x3c/0x70 [ 149.120105] exc_invalid_op+0x14/0x50 [ 149.120132] asm_exc_invalid_op+0x16/0x20 [ 149.120166] group_sched_out.part.0+0x2c7/0x460 [ 149.120187] ctx_sched_out+0x8f1/0xc10 [ 149.120206] __perf_event_task_sched_out+0x6d0/0x18d0 [ 149.120230] __schedule+0xedd/0x2470 [ 149.120250] preempt_schedule_common+0x45/0xc0 [ 149.120273] __cond_resched+0x17/0x30 [ 149.120294] __mutex_lock+0xa3/0x14d0 [ 149.120317] __do_sys_perf_event_open+0x1eec/0x32c0 [ 149.120342] do_syscall_64+0x3b/0x90 [ 149.120369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.120404] [ 149.120404] other info that might help us debug this: [ 149.120404] [ 149.120410] Chain exists of: [ 149.120410] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 149.120410] [ 149.120440] Possible unsafe locking scenario: [ 149.120440] [ 149.120445] CPU0 CPU1 [ 149.120449] ---- ---- [ 149.120454] lock(&ctx->lock); [ 149.120465] lock(&rq->__lock); [ 149.120483] lock(&ctx->lock); [ 149.120495] lock((console_sem).lock); [ 149.120507] [ 149.120507] *** DEADLOCK *** [ 149.120507] [ 149.120511] 2 locks held by syz-executor.0/4466: [ 149.120524] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 149.120579] #1: ffff88800ee82c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 149.120634] [ 149.120634] stack backtrace: [ 149.120639] CPU: 1 PID: 4466 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220915 #1 [ 149.120664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 149.120680] Call Trace: [ 149.120686] [ 149.120694] dump_stack_lvl+0x8b/0xb3 [ 149.120723] check_noncircular+0x263/0x2e0 [ 149.120757] ? format_decode+0x26c/0xb50 [ 149.120787] ? print_circular_bug+0x450/0x450 [ 149.120821] ? enable_ptr_key_workfn+0x20/0x20 [ 149.120850] ? __lockdep_reset_lock+0x180/0x180 [ 149.120884] ? format_decode+0x26c/0xb50 [ 149.120916] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 149.120951] __lock_acquire+0x2a02/0x5e70 [ 149.120995] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 149.121041] lock_acquire+0x1a2/0x530 [ 149.121075] ? down_trylock+0xe/0x70 [ 149.121105] ? rcu_read_unlock+0x40/0x40 [ 149.121143] ? find_held_lock+0x2c/0x110 [ 149.121176] ? vprintk+0x84/0xa0 [ 149.121213] _raw_spin_lock_irqsave+0x39/0x60 [ 149.121246] ? down_trylock+0xe/0x70 [ 149.121273] down_trylock+0xe/0x70 [ 149.121300] ? vprintk+0x84/0xa0 [ 149.121335] __down_trylock_console_sem+0x3b/0xd0 [ 149.121370] vprintk_emit+0x16b/0x560 [ 149.121409] vprintk+0x84/0xa0 [ 149.121445] _printk+0xba/0xf1 [ 149.121481] ? record_print_text.cold+0x16/0x16 [ 149.121523] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 149.121549] ? lock_downgrade+0x6d0/0x6d0 [ 149.121585] ? report_bug.cold+0x66/0xab [ 149.121615] ? group_sched_out.part.0+0x2c7/0x460 [ 149.121637] report_bug.cold+0x72/0xab [ 149.121669] handle_bug+0x3c/0x70 [ 149.121697] exc_invalid_op+0x14/0x50 [ 149.121727] asm_exc_invalid_op+0x16/0x20 [ 149.121763] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 149.121790] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 149.121812] RSP: 0018:ffff88803683f978 EFLAGS: 00010006 [ 149.121830] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 149.121846] RDX: ffff88800c10b580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 149.121861] RBP: ffff8880368c05c8 R08: 0000000000000005 R09: 0000000000000001 [ 149.121876] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ee82c00 [ 149.121891] R13: ffff88806cf3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 149.121913] ? group_sched_out.part.0+0x2c7/0x460 [ 149.121939] ? group_sched_out.part.0+0x2c7/0x460 [ 149.121964] ctx_sched_out+0x8f1/0xc10 [ 149.121989] __perf_event_task_sched_out+0x6d0/0x18d0 [ 149.122020] ? lock_is_held_type+0xd7/0x130 [ 149.122058] ? __perf_cgroup_move+0x160/0x160 [ 149.122082] ? set_next_entity+0x304/0x550 [ 149.122118] ? update_curr+0x267/0x740 [ 149.122156] ? lock_is_held_type+0xd7/0x130 [ 149.122194] __schedule+0xedd/0x2470 [ 149.122221] ? io_schedule_timeout+0x150/0x150 [ 149.122245] ? lock_is_held_type+0xd7/0x130 [ 149.122283] ? lock_is_held_type+0xd7/0x130 [ 149.122340] ? __cond_resched+0x17/0x30 [ 149.122364] preempt_schedule_common+0x45/0xc0 [ 149.122390] __cond_resched+0x17/0x30 [ 149.122413] __mutex_lock+0xa3/0x14d0 [ 149.122441] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 149.122470] ? mutex_lock_io_nested+0x1310/0x1310 [ 149.122499] ? __up_read+0x192/0x730 [ 149.122529] ? up_write+0x480/0x480 [ 149.122563] __do_sys_perf_event_open+0x1eec/0x32c0 [ 149.122596] ? perf_compat_ioctl+0x130/0x130 [ 149.122622] ? syscall_enter_from_user_mode+0x18/0x50 [ 149.122659] ? perf_trace_preemptirq_template+0xa2/0x420 [ 149.122704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 149.122742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 149.122783] do_syscall_64+0x3b/0x90 [ 149.122813] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.122849] RIP: 0033:0x7fae5402fb19 [ 149.122866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 149.122888] RSP: 002b:00007fae515a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 149.122909] RAX: ffffffffffffffda RBX: 00007fae54142f60 RCX: 00007fae5402fb19 [ 149.122925] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 149.122940] RBP: 00007fae54089f6d R08: 0000000000000000 R09: 0000000000000000 [ 149.122954] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 149.122969] R13: 00007ffd34887e5f R14: 00007fae515a5300 R15: 0000000000022000 [ 149.122994] [ 149.240512] WARNING: CPU: 1 PID: 4466 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 149.241847] Modules linked in: [ 149.242336] CPU: 1 PID: 4466 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220915 #1 [ 149.243488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 149.245101] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 149.245885] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 149.248476] RSP: 0018:ffff88803683f978 EFLAGS: 00010006 [ 149.249248] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 149.250274] RDX: ffff88800c10b580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 149.251298] RBP: ffff8880368c05c8 R08: 0000000000000005 R09: 0000000000000001 [ 149.252322] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ee82c00 [ 149.253350] R13: ffff88806cf3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 149.254392] FS: 00007fae515a5700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 149.255555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.256387] CR2: 0000001b2d524000 CR3: 000000000f0ae000 CR4: 0000000000350ee0 [ 149.257410] Call Trace: [ 149.257791] [ 149.258134] ctx_sched_out+0x8f1/0xc10 [ 149.258709] __perf_event_task_sched_out+0x6d0/0x18d0 [ 149.259473] ? lock_is_held_type+0xd7/0x130 [ 149.260121] ? __perf_cgroup_move+0x160/0x160 [ 149.260791] ? set_next_entity+0x304/0x550 [ 149.261426] ? update_curr+0x267/0x740 [ 149.262020] ? lock_is_held_type+0xd7/0x130 [ 149.262676] __schedule+0xedd/0x2470 [ 149.263238] ? io_schedule_timeout+0x150/0x150 [ 149.263903] ? lock_is_held_type+0xd7/0x130 [ 149.264554] ? lock_is_held_type+0xd7/0x130 [ 149.265206] ? __cond_resched+0x17/0x30 [ 149.265799] preempt_schedule_common+0x45/0xc0 [ 149.266485] __cond_resched+0x17/0x30 [ 149.267058] __mutex_lock+0xa3/0x14d0 [ 149.267633] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 149.268403] ? mutex_lock_io_nested+0x1310/0x1310 [ 149.269117] ? __up_read+0x192/0x730 [ 149.269670] ? up_write+0x480/0x480 [ 149.270230] __do_sys_perf_event_open+0x1eec/0x32c0 [ 149.270981] ? perf_compat_ioctl+0x130/0x130 [ 149.271638] ? syscall_enter_from_user_mode+0x18/0x50 [ 149.272403] ? perf_trace_preemptirq_template+0xa2/0x420 [ 149.273205] ? syscall_enter_from_user_mode+0x1d/0x50 [ 149.273975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 149.274760] do_syscall_64+0x3b/0x90 [ 149.275319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.276088] RIP: 0033:0x7fae5402fb19 [ 149.276635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 149.279256] RSP: 002b:00007fae515a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 149.280358] RAX: ffffffffffffffda RBX: 00007fae54142f60 RCX: 00007fae5402fb19 [ 149.281386] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 149.282408] RBP: 00007fae54089f6d R08: 0000000000000000 R09: 0000000000000000 [ 149.283432] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 149.284471] R13: 00007ffd34887e5f R14: 00007fae515a5300 R15: 0000000000022000 [ 149.285505] [ 149.285842] irq event stamp: 1020 [ 149.286351] hardirqs last enabled at (1019): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 149.287782] hardirqs last disabled at (1020): [] __schedule+0x1225/0x2470 [ 149.288972] softirqs last enabled at (976): [] __irq_exit_rcu+0x11b/0x180 [ 149.290210] softirqs last disabled at (941): [] __irq_exit_rcu+0x11b/0x180 [ 149.291445] ---[ end trace 0000000000000000 ]--- 12:33:45 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) 12:33:46 executing program 6: mkdir(&(0x7f0000003b80)='./file0\x00', 0xcc142d1502f486bf) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 12:33:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2283, &(0x7f0000000000)) 12:33:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x101) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc) 12:33:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="fc0100001300010000000000000000000c0000000200000000000000d100838008002e"], 0x1fc}], 0x1}, 0x0) [ 149.423688] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.446350] hrtimer: interrupt took 16341 ns 12:33:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0xffe0000) 12:33:46 executing program 6: mkdir(&(0x7f0000003b80)='./file0\x00', 0xcc142d1502f486bf) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 12:33:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:46 executing program 6: mkdir(&(0x7f0000003b80)='./file0\x00', 0xcc142d1502f486bf) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 12:33:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2283, &(0x7f0000000000)) 12:33:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0xffe0000) 12:33:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="fc0100001300010000000000000000000c0000000200000000000000d100838008002e"], 0x1fc}], 0x1}, 0x0) 12:33:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x101) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc) 12:33:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) [ 150.061834] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.075839] loop2: detected capacity change from 0 to 40 12:33:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2283, &(0x7f0000000000)) 12:33:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0xffe0000) 12:33:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="fc0100001300010000000000000000000c0000000200000000000000d100838008002e"], 0x1fc}], 0x1}, 0x0) 12:33:47 executing program 6: mkdir(&(0x7f0000003b80)='./file0\x00', 0xcc142d1502f486bf) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 12:33:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) [ 150.184965] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.1'. 12:33:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="fc0100001300010000000000000000000c0000000200000000000000d100838008002e"], 0x1fc}], 0x1}, 0x0) 12:33:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x101) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc) [ 150.316743] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.440745] syz-executor.2: attempt to access beyond end of device [ 150.440745] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 150.443125] Buffer I/O error on dev loop2, logical block 10, lost async page write 12:33:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x101) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc) 12:33:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x101) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc) 12:33:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) 12:33:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x101) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc) 12:33:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) [ 150.663142] loop2: detected capacity change from 0 to 40 12:33:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x101) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc) 12:33:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x101) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc) 12:33:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x101) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc) 12:33:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x101) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc) 12:33:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) 12:33:48 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0xffe0000) 12:33:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x7, 0x5, 0x1d, 0x8, "c0db93bd579ffb40c1bacb7e014c09d87ba46ee7244b8aeff152b7546057009ee8a3e9c6ea8442f941a49f46b74e4ec66bedcd89b10012d9af7c6c6eaf856af9", "469896bf6bf35adea3cc7c65c940d8a749d6c0b0c149163dcce16f14e5e7fa41", [0xfffffffffffff72f, 0x1]}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, &(0x7f0000000000)=0xd, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x6, 0x7f, 0x400}, {0x982b, 0x3, 0x4, 0x4}, {0x9, 0x7f, 0x7b, 0x1}, {0x2, 0x3, 0x1, 0x401}, {0x8, 0x3, 0xd1, 0x6}]}) 12:33:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) [ 151.591782] loop2: detected capacity change from 0 to 40 [ 151.692977] syz-executor.2: attempt to access beyond end of device [ 151.692977] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 151.694487] Buffer I/O error on dev loop2, logical block 10, lost async page write 12:33:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @broadcast, r2}, 0xc) 12:33:48 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0xffe0000) 12:33:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x7, 0x5, 0x1d, 0x8, "c0db93bd579ffb40c1bacb7e014c09d87ba46ee7244b8aeff152b7546057009ee8a3e9c6ea8442f941a49f46b74e4ec66bedcd89b10012d9af7c6c6eaf856af9", "469896bf6bf35adea3cc7c65c940d8a749d6c0b0c149163dcce16f14e5e7fa41", [0xfffffffffffff72f, 0x1]}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, &(0x7f0000000000)=0xd, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x6, 0x7f, 0x400}, {0x982b, 0x3, 0x4, 0x4}, {0x9, 0x7f, 0x7b, 0x1}, {0x2, 0x3, 0x1, 0x401}, {0x8, 0x3, 0xd1, 0x6}]}) 12:33:48 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 12:33:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @remote}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 12:33:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/../file0\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x10000, 0x0, 0x9, 0x7, 0x80000000, 0x1, 0x4006, 0x0, 0x2}, r1, 0x0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') clock_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x1c, 0x1, @thr={&(0x7f00000001c0)="7b54d93735e580da4d4b2b1e5b24a25a8bcaf2bc41f8356ec6fa12c71614249af8fe1716f91df35223852725637e0bd619f0a83761463849c1941d2e8e5d3cd891ff19e667251cf607586223f573de3c87e5bcfc1b0efdc1170f8b091408913297abe8ae0133b2ac2e9d432e7e4284ea931c2f138bcda97300df764704007edce14f397f8338c2da279f6640d7c262142c8a996a16d4fb4d5f51d4e5423e0d355e2c2c6fcd182ca6e9f884a4332012c3a1fae0b6fe4c1e5ca7834b10477ce1f489e414b3f293504e6bbbf8a633e5918331f89f9fd30d030b", &(0x7f00000002c0)="e8688df451238387d527607ff86f50345f9daa5b2393bc2ee69dad33498d331e4521010841f5c772701aa08d344c122aee2fcb69cb53d9c4a3e4f4385e483af1f93949b6b0c52b5d2a7660371ea32859657afa5a48652841b683aec70010ae4ebce053ab6b3e521c2cd89875319b74a5ac5863cf475383afccbf06b87b93028341c6fedb1e0937cc4b5cba4b8de113999f3e3542f4391f71ce74c6c3b250f243843e1a8d54dfd0419af205f03fc3fe7407d6c4bd7808"}}, &(0x7f00000003c0)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) timer_delete(0x0) pselect6(0x40, &(0x7f0000000480)={0x2, 0x0, 0x800, 0x7, 0x7, 0x3, 0x0, 0xffffffffffffff0b}, &(0x7f00000004c0)={0x40, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x9, 0x2, 0x5dc, 0x1, 0x29a}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) 12:33:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x23, 0x0, 0x0) 12:33:49 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x125d, 0xffffffffffffffff) 12:33:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @remote}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 12:33:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x7, 0x5, 0x1d, 0x8, "c0db93bd579ffb40c1bacb7e014c09d87ba46ee7244b8aeff152b7546057009ee8a3e9c6ea8442f941a49f46b74e4ec66bedcd89b10012d9af7c6c6eaf856af9", "469896bf6bf35adea3cc7c65c940d8a749d6c0b0c149163dcce16f14e5e7fa41", [0xfffffffffffff72f, 0x1]}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, &(0x7f0000000000)=0xd, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x6, 0x7f, 0x400}, {0x982b, 0x3, 0x4, 0x4}, {0x9, 0x7f, 0x7b, 0x1}, {0x2, 0x3, 0x1, 0x401}, {0x8, 0x3, 0xd1, 0x6}]}) 12:33:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @broadcast, r2}, 0xc) 12:33:49 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0xffe0000) 12:33:49 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 12:33:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x23, 0x0, 0x0) 12:33:49 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x125d, 0xffffffffffffffff) 12:33:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @remote}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 12:33:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0x0, r0, r0) 12:33:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x23, 0x0, 0x0) 12:33:49 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x125d, 0xffffffffffffffff) 12:33:49 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 12:33:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x7, 0x5, 0x1d, 0x8, "c0db93bd579ffb40c1bacb7e014c09d87ba46ee7244b8aeff152b7546057009ee8a3e9c6ea8442f941a49f46b74e4ec66bedcd89b10012d9af7c6c6eaf856af9", "469896bf6bf35adea3cc7c65c940d8a749d6c0b0c149163dcce16f14e5e7fa41", [0xfffffffffffff72f, 0x1]}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, &(0x7f0000000000)=0xd, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x6, 0x7f, 0x400}, {0x982b, 0x3, 0x4, 0x4}, {0x9, 0x7f, 0x7b, 0x1}, {0x2, 0x3, 0x1, 0x401}, {0x8, 0x3, 0xd1, 0x6}]}) 12:33:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @broadcast, r2}, 0xc) 12:33:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0x0, r0, r0) 12:33:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @remote}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 12:33:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x1, 0x3f}) 12:33:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @broadcast, r2}, 0xc) 12:33:49 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x6) pread64(r0, &(0x7f0000000000)=""/101, 0x65, 0x0) 12:33:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x1, 0x3f}) 12:33:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x23, 0x0, 0x0) 12:33:49 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x125d, 0xffffffffffffffff) 12:33:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) 12:33:49 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 12:33:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0x0, r0, r0) 12:33:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x1, 0x3f}) 12:33:49 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x6) pread64(r0, &(0x7f0000000000)=""/101, 0x65, 0x0) 12:33:49 executing program 2: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x4) 12:33:49 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 12:33:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0x0, r0, r0) 12:33:49 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x6) pread64(r0, &(0x7f0000000000)=""/101, 0x65, 0x0) 12:33:49 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0xf}, 0x0) 12:33:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x1, 0x3f}) 12:33:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) 12:33:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setxattr$incfs_id(&(0x7f0000002600)='./cgroup/cgroup.procs\x00', &(0x7f0000002640), 0x0, 0x0, 0x0) 12:33:49 executing program 5: statx(0xffffffffffffffff, &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0) 12:33:49 executing program 2: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x4) 12:33:49 executing program 7: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x7) read(r0, 0x0, 0x54) 12:33:49 executing program 2: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x4) 12:33:49 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0xf}, 0x0) 12:33:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) 12:33:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setxattr$incfs_id(&(0x7f0000002600)='./cgroup/cgroup.procs\x00', &(0x7f0000002640), 0x0, 0x0, 0x0) 12:33:49 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0x0) 12:33:49 executing program 4: socket$unix(0x1, 0x0, 0x0) 12:33:49 executing program 7: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x7) read(r0, 0x0, 0x54) 12:33:49 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x6) pread64(r0, &(0x7f0000000000)=""/101, 0x65, 0x0) 12:33:49 executing program 2: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x4) 12:33:49 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0xf}, 0x0) 12:33:49 executing program 4: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\x VM DIAGNOSIS: 12:33:46 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888031970a90 RCX=0000000000000000 RDX=ffff888031970a98 RSI=ffffffff814cef28 RDI=ffff888031970a98 RBP=0000000000000000 RSP=ffff8880368776d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff842638a2 R13=ffff88803029c9c0 R14=0000000000000000 R15=ffff888007c4fa00 RIP=ffffffff814cef45 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555557b6c58 CR3=000000002044c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88803683f3c8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0 RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fae515a5700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d524000 CR3=000000000f0ae000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fae541167c0 00007fae541167c8 YMM02=0000000000000000 0000000000000000 00007fae541167e0 00007fae541167c0 YMM03=0000000000000000 0000000000000000 00007fae541167c8 00007fae541167c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000