Warning: Permanently added '[localhost]:13546' (ECDSA) to the list of known hosts.
2022/09/19 13:51:19 fuzzer started
2022/09/19 13:51:20 dialing manager at localhost:42121
syzkaller login: [   38.926344] cgroup: Unknown subsys name 'net'
[   39.031622] cgroup: Unknown subsys name 'rlimit'
2022/09/19 13:51:34 syscalls: 2215
2022/09/19 13:51:34 code coverage: enabled
2022/09/19 13:51:34 comparison tracing: enabled
2022/09/19 13:51:34 extra coverage: enabled
2022/09/19 13:51:34 setuid sandbox: enabled
2022/09/19 13:51:34 namespace sandbox: enabled
2022/09/19 13:51:34 Android sandbox: enabled
2022/09/19 13:51:34 fault injection: enabled
2022/09/19 13:51:34 leak checking: enabled
2022/09/19 13:51:34 net packet injection: enabled
2022/09/19 13:51:34 net device setup: enabled
2022/09/19 13:51:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/19 13:51:34 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/19 13:51:34 USB emulation: enabled
2022/09/19 13:51:34 hci packet injection: enabled
2022/09/19 13:51:34 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220919                                          )
2022/09/19 13:51:34 802.15.4 emulation: enabled
2022/09/19 13:51:34 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/19 13:51:35 fetching corpus: 50, signal 26218/29645 (executing program)
2022/09/19 13:51:35 fetching corpus: 100, signal 35873/40676 (executing program)
2022/09/19 13:51:35 fetching corpus: 150, signal 46882/52762 (executing program)
2022/09/19 13:51:35 fetching corpus: 200, signal 51939/59055 (executing program)
2022/09/19 13:51:35 fetching corpus: 250, signal 58612/66710 (executing program)
2022/09/19 13:51:35 fetching corpus: 300, signal 63320/72378 (executing program)
2022/09/19 13:51:35 fetching corpus: 350, signal 68824/78707 (executing program)
2022/09/19 13:51:36 fetching corpus: 400, signal 73153/83805 (executing program)
2022/09/19 13:51:36 fetching corpus: 450, signal 77953/89284 (executing program)
2022/09/19 13:51:36 fetching corpus: 500, signal 82522/94442 (executing program)
2022/09/19 13:51:36 fetching corpus: 550, signal 84903/97615 (executing program)
2022/09/19 13:51:36 fetching corpus: 600, signal 88160/101487 (executing program)
2022/09/19 13:51:36 fetching corpus: 650, signal 90517/104530 (executing program)
2022/09/19 13:51:36 fetching corpus: 700, signal 92260/107006 (executing program)
2022/09/19 13:51:36 fetching corpus: 750, signal 95288/110485 (executing program)
2022/09/19 13:51:37 fetching corpus: 800, signal 97766/113439 (executing program)
2022/09/19 13:51:37 fetching corpus: 850, signal 99248/115567 (executing program)
2022/09/19 13:51:37 fetching corpus: 900, signal 101656/118368 (executing program)
2022/09/19 13:51:37 fetching corpus: 950, signal 102897/120213 (executing program)
2022/09/19 13:51:37 fetching corpus: 1000, signal 106877/124108 (executing program)
2022/09/19 13:51:37 fetching corpus: 1050, signal 107942/125754 (executing program)
2022/09/19 13:51:37 fetching corpus: 1100, signal 110136/128214 (executing program)
2022/09/19 13:51:38 fetching corpus: 1150, signal 112029/130379 (executing program)
2022/09/19 13:51:38 fetching corpus: 1200, signal 114260/132726 (executing program)
2022/09/19 13:51:38 fetching corpus: 1250, signal 116445/135019 (executing program)
2022/09/19 13:51:38 fetching corpus: 1300, signal 120035/138229 (executing program)
2022/09/19 13:51:38 fetching corpus: 1350, signal 122050/140299 (executing program)
2022/09/19 13:51:38 fetching corpus: 1400, signal 123575/141950 (executing program)
2022/09/19 13:51:38 fetching corpus: 1450, signal 125203/143688 (executing program)
2022/09/19 13:51:39 fetching corpus: 1500, signal 127133/145577 (executing program)
2022/09/19 13:51:39 fetching corpus: 1550, signal 129529/147713 (executing program)
2022/09/19 13:51:39 fetching corpus: 1600, signal 131356/149441 (executing program)
2022/09/19 13:51:39 fetching corpus: 1650, signal 133283/151200 (executing program)
2022/09/19 13:51:39 fetching corpus: 1700, signal 134616/152523 (executing program)
2022/09/19 13:51:39 fetching corpus: 1750, signal 136683/154248 (executing program)
2022/09/19 13:51:39 fetching corpus: 1800, signal 138951/156048 (executing program)
2022/09/19 13:51:39 fetching corpus: 1850, signal 140843/157558 (executing program)
2022/09/19 13:51:40 fetching corpus: 1900, signal 141774/158557 (executing program)
2022/09/19 13:51:40 fetching corpus: 1950, signal 142740/159515 (executing program)
2022/09/19 13:51:40 fetching corpus: 2000, signal 144171/160679 (executing program)
2022/09/19 13:51:40 fetching corpus: 2050, signal 145672/161886 (executing program)
2022/09/19 13:51:40 fetching corpus: 2100, signal 147303/163096 (executing program)
2022/09/19 13:51:40 fetching corpus: 2150, signal 148379/164021 (executing program)
2022/09/19 13:51:40 fetching corpus: 2200, signal 149870/165132 (executing program)
2022/09/19 13:51:41 fetching corpus: 2250, signal 150664/165905 (executing program)
2022/09/19 13:51:41 fetching corpus: 2300, signal 151801/166801 (executing program)
2022/09/19 13:51:41 fetching corpus: 2350, signal 152678/167564 (executing program)
2022/09/19 13:51:41 fetching corpus: 2400, signal 153882/168409 (executing program)
2022/09/19 13:51:41 fetching corpus: 2450, signal 154971/169161 (executing program)
2022/09/19 13:51:41 fetching corpus: 2500, signal 156374/170092 (executing program)
2022/09/19 13:51:41 fetching corpus: 2550, signal 157005/170637 (executing program)
2022/09/19 13:51:41 fetching corpus: 2600, signal 158679/171933 (executing program)
2022/09/19 13:51:41 fetching corpus: 2650, signal 159864/173050 (executing program)
2022/09/19 13:51:42 fetching corpus: 2700, signal 161126/173781 (executing program)
2022/09/19 13:51:42 fetching corpus: 2750, signal 162404/174469 (executing program)
2022/09/19 13:51:42 fetching corpus: 2800, signal 163248/175044 (executing program)
2022/09/19 13:51:42 fetching corpus: 2850, signal 164048/175529 (executing program)
2022/09/19 13:51:42 fetching corpus: 2900, signal 164956/176038 (executing program)
2022/09/19 13:51:42 fetching corpus: 2950, signal 166521/176771 (executing program)
2022/09/19 13:51:42 fetching corpus: 3000, signal 167982/177428 (executing program)
2022/09/19 13:51:43 fetching corpus: 3050, signal 168555/177744 (executing program)
2022/09/19 13:51:43 fetching corpus: 3100, signal 170062/178350 (executing program)
2022/09/19 13:51:43 fetching corpus: 3150, signal 170967/178754 (executing program)
2022/09/19 13:51:43 fetching corpus: 3200, signal 171841/179131 (executing program)
2022/09/19 13:51:43 fetching corpus: 3250, signal 172447/179410 (executing program)
2022/09/19 13:51:43 fetching corpus: 3300, signal 173116/179672 (executing program)
2022/09/19 13:51:43 fetching corpus: 3350, signal 174402/180167 (executing program)
2022/09/19 13:51:43 fetching corpus: 3400, signal 175356/180469 (executing program)
2022/09/19 13:51:44 fetching corpus: 3450, signal 176320/180780 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/180984 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181040 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181100 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181152 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181203 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181248 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181304 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181365 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181433 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181505 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181559 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181604 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181656 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181704 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181778 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181840 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181882 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/181933 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/182008 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/182012 (executing program)
2022/09/19 13:51:44 fetching corpus: 3486, signal 176974/182012 (executing program)
2022/09/19 13:51:46 starting 8 fuzzer processes
13:51:46 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000002600)='numa_maps\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

13:51:46 executing program 1:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:51:46 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

13:51:46 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)

13:51:46 executing program 4:
syz_mount_image$nfs(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[], [{@subj_type={'subj_type', 0x3d, '}'}}]})

13:51:46 executing program 5:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0)
pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="99", 0x1}], 0x1, 0x0, 0x0, 0x9)

[   65.378725] audit: type=1400 audit(1663595506.844:6): avc:  denied  { execmem } for  pid=291 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:51:46 executing program 6:
gettid()

13:51:46 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0)

[   66.703017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.704807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.707316] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.708626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.709497] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.711645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.714527] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.716825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   66.716904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.719186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.721550] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.723304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.727640] Bluetooth: hci1: HCI_REQ-0x0c1a
[   66.728967] Bluetooth: hci0: HCI_REQ-0x0c1a
[   66.761912] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   66.764492] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.768716] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   66.773186] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   66.774460] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.775748] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   66.783623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   66.784620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   66.785828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.788201] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   66.789351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.791134] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   66.793529] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   66.795003] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   66.796028] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   66.798920] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   66.801328] Bluetooth: hci6: HCI_REQ-0x0c1a
[   66.802029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   66.809535] Bluetooth: hci4: HCI_REQ-0x0c1a
[   66.816894] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.818082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.818179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   66.821796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   66.823113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.824314] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   66.826101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.832810] Bluetooth: hci2: HCI_REQ-0x0c1a
[   66.845907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.854219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   66.855605] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   66.867243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.868902] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   66.870763] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   66.883484] Bluetooth: hci3: HCI_REQ-0x0c1a
[   66.884216] Bluetooth: hci5: HCI_REQ-0x0c1a
[   66.906058] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   66.908332] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   66.918786] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   66.929705] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   66.932124] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   66.933809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   66.944750] Bluetooth: hci7: HCI_REQ-0x0c1a
[   68.789885] Bluetooth: hci0: command 0x0409 tx timeout
[   68.790727] Bluetooth: hci1: command 0x0409 tx timeout
[   68.853529] Bluetooth: hci2: command 0x0409 tx timeout
[   68.854031] Bluetooth: hci6: command 0x0409 tx timeout
[   68.854463] Bluetooth: hci4: command 0x0409 tx timeout
[   68.918499] Bluetooth: hci5: command 0x0409 tx timeout
[   68.919850] Bluetooth: hci3: command 0x0409 tx timeout
[   68.981449] Bluetooth: hci7: command 0x0409 tx timeout
[   70.837541] Bluetooth: hci1: command 0x041b tx timeout
[   70.838323] Bluetooth: hci0: command 0x041b tx timeout
[   70.901535] Bluetooth: hci6: command 0x041b tx timeout
[   70.902278] Bluetooth: hci2: command 0x041b tx timeout
[   70.902503] Bluetooth: hci4: command 0x041b tx timeout
[   70.966536] Bluetooth: hci3: command 0x041b tx timeout
[   70.967122] Bluetooth: hci5: command 0x041b tx timeout
[   71.030475] Bluetooth: hci7: command 0x041b tx timeout
[   72.886472] Bluetooth: hci0: command 0x040f tx timeout
[   72.887043] Bluetooth: hci1: command 0x040f tx timeout
[   72.949613] Bluetooth: hci4: command 0x040f tx timeout
[   72.950480] Bluetooth: hci2: command 0x040f tx timeout
[   72.951048] Bluetooth: hci6: command 0x040f tx timeout
[   73.013544] Bluetooth: hci5: command 0x040f tx timeout
[   73.014383] Bluetooth: hci3: command 0x040f tx timeout
[   73.077832] Bluetooth: hci7: command 0x040f tx timeout
[   74.933481] Bluetooth: hci1: command 0x0419 tx timeout
[   74.933972] Bluetooth: hci0: command 0x0419 tx timeout
[   74.997525] Bluetooth: hci6: command 0x0419 tx timeout
[   74.998243] Bluetooth: hci2: command 0x0419 tx timeout
[   74.998704] Bluetooth: hci4: command 0x0419 tx timeout
[   75.061458] Bluetooth: hci3: command 0x0419 tx timeout
[   75.061911] Bluetooth: hci5: command 0x0419 tx timeout
[   75.125450] Bluetooth: hci7: command 0x0419 tx timeout
[  121.281301] nfs: Unknown parameter 'subj_type'
[  121.289327] nfs: Unknown parameter 'subj_type'
13:52:42 executing program 4:
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x1000b9}, 0x20)

13:52:43 executing program 4:
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x1000b9}, 0x20)

[  121.825593] audit: type=1400 audit(1663595563.291:7): avc:  denied  { open } for  pid=3841 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
13:52:43 executing program 4:
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x1000b9}, 0x20)

13:52:43 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)

13:52:43 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)

13:52:43 executing program 4:
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x1000b9}, 0x20)

13:52:43 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)

13:52:43 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)

[  122.763801] audit: type=1400 audit(1663595564.229:8): avc:  denied  { kernel } for  pid=3895 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  122.776297] ------------[ cut here ]------------
[  122.776318] 
[  122.776321] ======================================================
[  122.776325] WARNING: possible circular locking dependency detected
[  122.776329] 6.0.0-rc6-next-20220919 #1 Not tainted
[  122.776336] ------------------------------------------------------
[  122.776339] syz-executor.0/3897 is trying to acquire lock:
[  122.776345] ffffffff853fa838 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  122.776384] 
[  122.776384] but task is already holding lock:
[  122.776387] ffff88800d136020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  122.776417] 
[  122.776417] which lock already depends on the new lock.
[  122.776417] 
[  122.776420] 
[  122.776420] the existing dependency chain (in reverse order) is:
[  122.776423] 
[  122.776423] -> #3 (&ctx->lock){....}-{2:2}:
[  122.776437]        _raw_spin_lock+0x2a/0x40
[  122.776455]        __perf_event_task_sched_out+0x53b/0x18d0
[  122.776467]        __schedule+0xedd/0x2470
[  122.776478]        schedule+0xda/0x1b0
[  122.776488]        exit_to_user_mode_prepare+0x114/0x1a0
[  122.776509]        syscall_exit_to_user_mode+0x19/0x40
[  122.776527]        do_syscall_64+0x48/0x90
[  122.776541]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  122.776559] 
[  122.776559] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  122.776572]        _raw_spin_lock_nested+0x30/0x40
[  122.776587]        raw_spin_rq_lock_nested+0x1e/0x30
[  122.776600]        task_fork_fair+0x63/0x4d0
[  122.776617]        sched_cgroup_fork+0x3d0/0x540
[  122.776631]        copy_process+0x4183/0x6e20
[  122.776641]        kernel_clone+0xe7/0x890
[  122.776651]        user_mode_thread+0xad/0xf0
[  122.776661]        rest_init+0x24/0x250
[  122.776677]        arch_call_rest_init+0xf/0x14
[  122.776690]        start_kernel+0x4c1/0x4e6
[  122.776699]        secondary_startup_64_no_verify+0xe0/0xeb
[  122.776714] 
[  122.776714] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  122.776727]        _raw_spin_lock_irqsave+0x39/0x60
[  122.776742]        try_to_wake_up+0xab/0x1920
[  122.776755]        up+0x75/0xb0
[  122.776766]        __up_console_sem+0x6e/0x80
[  122.776782]        console_unlock+0x46a/0x590
[  122.776797]        vprintk_emit+0x1bd/0x560
[  122.776813]        vprintk+0x84/0xa0
[  122.776829]        _printk+0xba/0xf1
[  122.776846]        kauditd_hold_skb.cold+0x3f/0x4e
[  122.776860]        kauditd_send_queue+0x233/0x290
[  122.776875]        kauditd_thread+0x5da/0x9a0
[  122.776888]        kthread+0x2ed/0x3a0
[  122.776903]        ret_from_fork+0x22/0x30
[  122.776915] 
[  122.776915] -> #0 ((console_sem).lock){....}-{2:2}:
[  122.776929]        __lock_acquire+0x2a02/0x5e70
[  122.776945]        lock_acquire+0x1a2/0x530
[  122.776960]        _raw_spin_lock_irqsave+0x39/0x60
[  122.776974]        down_trylock+0xe/0x70
[  122.776987]        __down_trylock_console_sem+0x3b/0xd0
[  122.777002]        vprintk_emit+0x16b/0x560
[  122.777018]        vprintk+0x84/0xa0
[  122.777033]        _printk+0xba/0xf1
[  122.777049]        report_bug.cold+0x72/0xab
[  122.777061]        handle_bug+0x3c/0x70
[  122.777074]        exc_invalid_op+0x14/0x50
[  122.777087]        asm_exc_invalid_op+0x16/0x20
[  122.777103]        group_sched_out.part.0+0x2c7/0x460
[  122.777113]        ctx_sched_out+0x8f1/0xc10
[  122.777123]        __perf_event_task_sched_out+0x6d0/0x18d0
[  122.777134]        __schedule+0xedd/0x2470
[  122.777144]        schedule+0xda/0x1b0
[  122.777154]        exit_to_user_mode_prepare+0x114/0x1a0
[  122.777172]        syscall_exit_to_user_mode+0x19/0x40
[  122.777189]        do_syscall_64+0x48/0x90
[  122.777201]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  122.777218] 
[  122.777218] other info that might help us debug this:
[  122.777218] 
[  122.777221] Chain exists of:
[  122.777221]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  122.777221] 
[  122.777236]  Possible unsafe locking scenario:
[  122.777236] 
[  122.777238]        CPU0                    CPU1
[  122.777241]        ----                    ----
[  122.777243]   lock(&ctx->lock);
[  122.777249]                                lock(&rq->__lock);
[  122.777255]                                lock(&ctx->lock);
[  122.777261]   lock((console_sem).lock);
[  122.777267] 
[  122.777267]  *** DEADLOCK ***
[  122.777267] 
[  122.777269] 2 locks held by syz-executor.0/3897:
[  122.777276]  #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  122.777302]  #1: ffff88800d136020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  122.777329] 
[  122.777329] stack backtrace:
[  122.777332] CPU: 0 PID: 3897 Comm: syz-executor.0 Not tainted 6.0.0-rc6-next-20220919 #1
[  122.777345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  122.777353] Call Trace:
[  122.777356]  <TASK>
[  122.777360]  dump_stack_lvl+0x8b/0xb3
[  122.777375]  check_noncircular+0x263/0x2e0
[  122.777391]  ? format_decode+0x26c/0xb50
[  122.777406]  ? print_circular_bug+0x450/0x450
[  122.777423]  ? enable_ptr_key_workfn+0x20/0x20
[  122.777437]  ? __lockdep_reset_lock+0x180/0x180
[  122.777453]  ? format_decode+0x26c/0xb50
[  122.777469]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  122.777486]  __lock_acquire+0x2a02/0x5e70
[  122.777507]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  122.777530]  lock_acquire+0x1a2/0x530
[  122.777546]  ? down_trylock+0xe/0x70
[  122.777560]  ? lock_release+0x750/0x750
[  122.777577]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  122.777597]  ? vprintk+0x84/0xa0
[  122.777615]  _raw_spin_lock_irqsave+0x39/0x60
[  122.777630]  ? down_trylock+0xe/0x70
[  122.777644]  down_trylock+0xe/0x70
[  122.777656]  ? vprintk+0x84/0xa0
[  122.777673]  __down_trylock_console_sem+0x3b/0xd0
[  122.777690]  vprintk_emit+0x16b/0x560
[  122.777706]  ? lock_downgrade+0x6d0/0x6d0
[  122.777724]  vprintk+0x84/0xa0
[  122.777741]  _printk+0xba/0xf1
[  122.777758]  ? record_print_text.cold+0x16/0x16
[  122.777778]  ? hrtimer_try_to_cancel+0x163/0x2c0
[  122.777792]  ? lock_downgrade+0x6d0/0x6d0
[  122.777809]  ? report_bug.cold+0x66/0xab
[  122.777823]  ? group_sched_out.part.0+0x2c7/0x460
[  122.777835]  report_bug.cold+0x72/0xab
[  122.777850]  handle_bug+0x3c/0x70
[  122.777863]  exc_invalid_op+0x14/0x50
[  122.777878]  asm_exc_invalid_op+0x16/0x20
[  122.777895] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  122.777908] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  122.777919] RSP: 0018:ffff88803eef7c48 EFLAGS: 00010006
[  122.777929] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  122.777936] RDX: ffff88801bc80000 RSI: ffffffff81566077 RDI: 0000000000000005
[  122.777944] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[  122.777952] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d136000
[  122.777959] R13: ffff88806ce3d140 R14: ffffffff8547bf80 R15: 0000000000000002
[  122.777971]  ? group_sched_out.part.0+0x2c7/0x460
[  122.777984]  ? group_sched_out.part.0+0x2c7/0x460
[  122.777996]  ctx_sched_out+0x8f1/0xc10
[  122.778009]  __perf_event_task_sched_out+0x6d0/0x18d0
[  122.778024]  ? lock_is_held_type+0xd7/0x130
[  122.778042]  ? __perf_cgroup_move+0x160/0x160
[  122.778054]  ? set_next_entity+0x304/0x550
[  122.778071]  ? update_curr+0x267/0x740
[  122.778089]  ? lock_is_held_type+0xd7/0x130
[  122.778115]  __schedule+0xedd/0x2470
[  122.778128]  ? io_schedule_timeout+0x150/0x150
[  122.778141]  ? __x64_sys_futex_time32+0x480/0x480
[  122.778156]  schedule+0xda/0x1b0
[  122.778167]  exit_to_user_mode_prepare+0x114/0x1a0
[  122.778187]  syscall_exit_to_user_mode+0x19/0x40
[  122.778204]  do_syscall_64+0x48/0x90
[  122.778218]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  122.778236] RIP: 0033:0x7fac6ece6b19
[  122.778244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  122.778255] RSP: 002b:00007fac6c25c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  122.778266] RAX: 0000000000000001 RBX: 00007fac6edf9f68 RCX: 00007fac6ece6b19
[  122.778274] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fac6edf9f6c
[  122.778281] RBP: 00007fac6edf9f60 R08: 000000000000000e R09: 0000000000000000
[  122.778289] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fac6edf9f6c
[  122.778296] R13: 00007ffd8ecc397f R14: 00007fac6c25c300 R15: 0000000000022000
[  122.778309]  </TASK>
[  122.836584] WARNING: CPU: 0 PID: 3897 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  122.837237] Modules linked in:
[  122.837476] CPU: 0 PID: 3897 Comm: syz-executor.0 Not tainted 6.0.0-rc6-next-20220919 #1
[  122.838049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  122.838845] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  122.839241] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  122.840564] RSP: 0018:ffff88803eef7c48 EFLAGS: 00010006
[  122.840960] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  122.841496] RDX: ffff88801bc80000 RSI: ffffffff81566077 RDI: 0000000000000005
[  122.842029] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[  122.842577] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d136000
[  122.843105] R13: ffff88806ce3d140 R14: ffffffff8547bf80 R15: 0000000000000002
[  122.843634] FS:  00007fac6c25c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  122.844235] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  122.844662] CR2: 00007f4524bcd310 CR3: 000000001be30000 CR4: 0000000000350ef0
[  122.845191] Call Trace:
[  122.845389]  <TASK>
[  122.845567]  ctx_sched_out+0x8f1/0xc10
[  122.845859]  __perf_event_task_sched_out+0x6d0/0x18d0
[  122.846258]  ? lock_is_held_type+0xd7/0x130
[  122.846594]  ? __perf_cgroup_move+0x160/0x160
[  122.846932]  ? set_next_entity+0x304/0x550
[  122.847252]  ? update_curr+0x267/0x740
[  122.847557]  ? lock_is_held_type+0xd7/0x130
[  122.847892]  __schedule+0xedd/0x2470
[  122.848178]  ? io_schedule_timeout+0x150/0x150
[  122.848524]  ? __x64_sys_futex_time32+0x480/0x480
[  122.848893]  schedule+0xda/0x1b0
[  122.849155]  exit_to_user_mode_prepare+0x114/0x1a0
[  122.849531]  syscall_exit_to_user_mode+0x19/0x40
[  122.849895]  do_syscall_64+0x48/0x90
[  122.850191]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  122.850585] RIP: 0033:0x7fac6ece6b19
[  122.850867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  122.852200] RSP: 002b:00007fac6c25c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  122.852796] RAX: 0000000000000001 RBX: 00007fac6edf9f68 RCX: 00007fac6ece6b19
[  122.853327] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fac6edf9f6c
[  122.853866] RBP: 00007fac6edf9f60 R08: 000000000000000e R09: 0000000000000000
[  122.854413] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fac6edf9f6c
[  122.854946] R13: 00007ffd8ecc397f R14: 00007fac6c25c300 R15: 0000000000022000
[  122.855474]  </TASK>
[  122.855654] irq event stamp: 970
[  122.855903] hardirqs last  enabled at (969): [<ffffffff81340019>] exit_to_user_mode_prepare+0x109/0x1a0
[  122.856606] hardirqs last disabled at (970): [<ffffffff8424d995>] __schedule+0x1225/0x2470
[  122.857212] softirqs last  enabled at (784): [<ffffffff8117063b>] __irq_exit_rcu+0x11b/0x180
[  122.857841] softirqs last disabled at (753): [<ffffffff8117063b>] __irq_exit_rcu+0x11b/0x180
[  122.858476] ---[ end trace 0000000000000000 ]---
[  123.100375] random: crng reseeded on system resumption
[  123.102026] Restarting kernel threads ... done.
[  123.152185] random: crng reseeded on system resumption
[  123.187795] loop1: detected capacity change from 0 to 40
[  123.242199] syz-executor.1: attempt to access beyond end of device
[  123.242199] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[  123.243362] Buffer I/O error on dev loop1, logical block 10, lost async page write
13:52:46 executing program 6:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:52:46 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

13:52:46 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0)

13:52:46 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000002600)='numa_maps\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

13:52:46 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r1, &(0x7f0000000040), 0x14)
connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14)
r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x81, 0xa9, 0x74, 0x2, 0x0, 0x0, 0x80000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x200, 0x8, 0xd8, 0xe, 0x20, 0x1, 0x3, 0x0, 0x4, 0x0, 0xffffffffffffff80}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
sendmmsg(r1, &(0x7f00000000c0), 0x45d, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000180000003280baf9f83d19c3121020f4cd8d22e86d022634546cf73119f07bbebe3bad6f83294587b457f664f11b1565c65d1a8344f5b44bdb2a3b1b17863dca5be00d57cff77d546f6c8e73c391809ab8891fadd449ce0ca6d50e0a316952502f76e9b13f732e2782ff521b44787baf320e35210f946d34f82e5d7da649b2bd6de9a174a7587d332a6b04392e3d5e56fe", @ANYRES32=r0, @ANYBLOB="00000049000200000000a45218f9c3c8cbdc857beef5fe5b53cf6702934f"])

13:52:46 executing program 5:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0)
pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="99", 0x1}], 0x1, 0x0, 0x0, 0x9)

13:52:46 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)

13:52:46 executing program 1:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[  124.997662] loop1: detected capacity change from 0 to 40
[  125.058331] loop6: detected capacity change from 0 to 40
[  125.071900] syz-executor.1: attempt to access beyond end of device
[  125.071900] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[  125.072916] Buffer I/O error on dev loop1, logical block 10, lost async page write
13:52:46 executing program 5:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0)
pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="99", 0x1}], 0x1, 0x0, 0x0, 0x9)

13:52:46 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0)

[  125.123594] syz-executor.6: attempt to access beyond end of device
[  125.123594] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[  125.124766] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:52:46 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  125.144844] random: crng reseeded on system resumption
13:52:46 executing program 1:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:52:46 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)

[  125.152705] Restarting kernel threads ... done.
13:52:46 executing program 5:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0)
pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="99", 0x1}], 0x1, 0x0, 0x0, 0x9)

[  125.187099] loop1: detected capacity change from 0 to 40
[  125.241895] syz-executor.1: attempt to access beyond end of device
[  125.241895] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[  125.242889] Buffer I/O error on dev loop1, logical block 10, lost async page write
13:52:46 executing program 6:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:52:46 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000002600)='numa_maps\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

13:52:46 executing program 5:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[  125.375311] loop1: detected capacity change from 0 to 40
13:52:46 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0)

13:52:46 executing program 1:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:52:46 executing program 4:
kexec_load(0x0, 0x0, 0x0, 0xf29b7b0788b5aca1)

13:52:46 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r1, &(0x7f0000000040), 0x14)
connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14)
r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x81, 0xa9, 0x74, 0x2, 0x0, 0x0, 0x80000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x200, 0x8, 0xd8, 0xe, 0x20, 0x1, 0x3, 0x0, 0x4, 0x0, 0xffffffffffffff80}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
sendmmsg(r1, &(0x7f00000000c0), 0x45d, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000180000003280baf9f83d19c3121020f4cd8d22e86d022634546cf73119f07bbebe3bad6f83294587b457f664f11b1565c65d1a8344f5b44bdb2a3b1b17863dca5be00d57cff77d546f6c8e73c391809ab8891fadd449ce0ca6d50e0a316952502f76e9b13f732e2782ff521b44787baf320e35210f946d34f82e5d7da649b2bd6de9a174a7587d332a6b04392e3d5e56fe", @ANYRES32=r0, @ANYBLOB="00000049000200000000a45218f9c3c8cbdc857beef5fe5b53cf6702934f"])

13:52:46 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  125.390247] loop5: detected capacity change from 0 to 40
[  125.391700] loop6: detected capacity change from 0 to 40
[  125.453123] syz-executor.1: attempt to access beyond end of device
[  125.453123] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[  125.454283] Buffer I/O error on dev loop1, logical block 10, lost async page write
[  125.469614] syz-executor.6: attempt to access beyond end of device
[  125.469614] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[  125.470791] Buffer I/O error on dev loop6, logical block 10, lost async page write
[  125.479997] syz-executor.5: attempt to access beyond end of device
[  125.479997] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[  125.481023] Buffer I/O error on dev loop5, logical block 10, lost async page write
13:52:46 executing program 2:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="dc", 0x1)

13:52:46 executing program 4:
kexec_load(0x0, 0x0, 0x0, 0xf29b7b0788b5aca1)

[  125.561419] hrtimer: interrupt took 15560 ns
[  125.596533] random: crng reseeded on system resumption
[  125.603743] Restarting kernel threads ... done.
13:52:47 executing program 5:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:52:47 executing program 2:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="dc", 0x1)

13:52:47 executing program 6:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[  125.774114] loop5: detected capacity change from 0 to 40
[  125.775994] loop6: detected capacity change from 0 to 40
13:52:47 executing program 4:
kexec_load(0x0, 0x0, 0x0, 0xf29b7b0788b5aca1)

13:52:47 executing program 1:
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x800)

13:52:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r1, &(0x7f0000000040), 0x14)
connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14)
r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x81, 0xa9, 0x74, 0x2, 0x0, 0x0, 0x80000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x200, 0x8, 0xd8, 0xe, 0x20, 0x1, 0x3, 0x0, 0x4, 0x0, 0xffffffffffffff80}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
sendmmsg(r1, &(0x7f00000000c0), 0x45d, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000180000003280baf9f83d19c3121020f4cd8d22e86d022634546cf73119f07bbebe3bad6f83294587b457f664f11b1565c65d1a8344f5b44bdb2a3b1b17863dca5be00d57cff77d546f6c8e73c391809ab8891fadd449ce0ca6d50e0a316952502f76e9b13f732e2782ff521b44787baf320e35210f946d34f82e5d7da649b2bd6de9a174a7587d332a6b04392e3d5e56fe", @ANYRES32=r0, @ANYBLOB="00000049000200000000a45218f9c3c8cbdc857beef5fe5b53cf6702934f"])

13:52:47 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x0, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000340))
r3 = io_uring_setup(0x4e11, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x3, 0x0, 0x0, r2})
fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xa74e, 0x10, 0x0, 0x49}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), 0x0)

13:52:47 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000002600)='numa_maps\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

13:52:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4, 0x1}]}]}, 0x1c}}, 0x0)

[  125.861672] random: crng reseeded on system resumption
[  125.863671] syz-executor.6: attempt to access beyond end of device
[  125.863671] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[  125.864700] Buffer I/O error on dev loop6, logical block 10, lost async page write
[  125.866062] Restarting kernel threads ... done.
[  125.871358] syz-executor.5: attempt to access beyond end of device
[  125.871358] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[  125.872420] Buffer I/O error on dev loop5, logical block 10, lost async page write
13:52:47 executing program 2:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="dc", 0x1)

13:52:47 executing program 4:
kexec_load(0x0, 0x0, 0x0, 0xf29b7b0788b5aca1)

13:52:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4, 0x1}]}]}, 0x1c}}, 0x0)

13:52:47 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000003000), 0x4)

13:52:47 executing program 5:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[  126.116075] loop5: detected capacity change from 0 to 40
13:52:47 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)

13:52:47 executing program 2:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="dc", 0x1)

13:52:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r1, &(0x7f0000000040), 0x14)
connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14)
r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x81, 0xa9, 0x74, 0x2, 0x0, 0x0, 0x80000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x200, 0x8, 0xd8, 0xe, 0x20, 0x1, 0x3, 0x0, 0x4, 0x0, 0xffffffffffffff80}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
sendmmsg(r1, &(0x7f00000000c0), 0x45d, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000180000003280baf9f83d19c3121020f4cd8d22e86d022634546cf73119f07bbebe3bad6f83294587b457f664f11b1565c65d1a8344f5b44bdb2a3b1b17863dca5be00d57cff77d546f6c8e73c391809ab8891fadd449ce0ca6d50e0a316952502f76e9b13f732e2782ff521b44787baf320e35210f946d34f82e5d7da649b2bd6de9a174a7587d332a6b04392e3d5e56fe", @ANYRES32=r0, @ANYBLOB="00000049000200000000a45218f9c3c8cbdc857beef5fe5b53cf6702934f"])

13:52:47 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)

13:52:47 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x0, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000340))
r3 = io_uring_setup(0x4e11, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x3, 0x0, 0x0, r2})
fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xa74e, 0x10, 0x0, 0x49}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), 0x0)

13:52:47 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)

13:52:47 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)

13:52:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4, 0x1}]}]}, 0x1c}}, 0x0)

13:52:47 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000003000), 0x4)

13:52:47 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x0, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000340))
r3 = io_uring_setup(0x4e11, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x3, 0x0, 0x0, r2})
fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xa74e, 0x10, 0x0, 0x49}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), 0x0)

[  126.230020] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  126.231064] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  126.231687] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  126.232260] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  126.232937] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  126.234728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.235159] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.235762] Buffer I/O error on dev sr0, logical block 0, async page read
[  126.237534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.237925] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.238753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.239141] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.240096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.240502] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.241293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.241732] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.242577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.242979] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.243801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.244185] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.244981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.245381] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.246261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.246687] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.247539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.248095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.248737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.249279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.249878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.250439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.251075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.251738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.252313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.252884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.253703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.254257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.254853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.255591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.256871] syz-executor.5: attempt to access beyond end of device
[  126.256871] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[  126.257822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.259735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.265753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.266689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.268822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.269448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.270795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.271366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.271998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:52:47 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)

13:52:47 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)

13:52:47 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000003000), 0x4)

13:52:47 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x0, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000340))
r3 = io_uring_setup(0x4e11, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x3, 0x0, 0x0, r2})
fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xa74e, 0x10, 0x0, 0x49}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), 0x0)

[  126.390831] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  126.391891] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  126.392562] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  126.393208] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  126.395931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.398108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.401631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.402731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.405132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.409642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.410751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.411326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.412163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.416627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.417210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:52:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4, 0x1}]}]}, 0x1c}}, 0x0)

[  126.418625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.419898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.420495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.421077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.422249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.423030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.425611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.430786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.431356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.432712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.433304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.436724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.440683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.496788] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  126.497496] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  126.498024] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  126.498533] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  126.500283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.501207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.501850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.502485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.503124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.503731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.504297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.504872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.505736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.506358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.506920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.507670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.508259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.508857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.509590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.510165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.510802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.511371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.511965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.512623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.513203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.513817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.514431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.515013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.515660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.516256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.518831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.519384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.519979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.520577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.521152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.522027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.522659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.523200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.523867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.524420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.524971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.525715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.526268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.526836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.527457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.527996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.528599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.529174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.530829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.532908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.533481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.534068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:52:48 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)

13:52:48 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)

13:52:48 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000003000), 0x4)

13:52:48 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x0, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000340))
r3 = io_uring_setup(0x4e11, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x3, 0x0, 0x0, r2})
fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xa74e, 0x10, 0x0, 0x49}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), 0x0)

13:52:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @remote}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}}}}, 0x0)

13:52:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x2000)=nil)

13:52:48 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x0, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000340))
r3 = io_uring_setup(0x4e11, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x3, 0x0, 0x0, r2})
fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xa74e, 0x10, 0x0, 0x49}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), 0x0)

13:52:48 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x0, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000340))
r3 = io_uring_setup(0x4e11, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x3, 0x0, 0x0, r2})
fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xa74e, 0x10, 0x0, 0x49}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), 0x0)

13:52:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @remote}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}}}}, 0x0)

13:52:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x2000)=nil)

13:52:48 executing program 0:
r0 = eventfd2(0x0, 0x801)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="c5d591842dc721cf", 0x8}, {&(0x7f00000000c0)="93ee52744d7239b5", 0x8}], 0x2)

[  126.702904] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  126.703628] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  126.704132] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  126.704620] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  126.705915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.707153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.707733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.708283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.708951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.709604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.710210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.710809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.711570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.712148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.712743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.713369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.714533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:52:48 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2279, 0x0)

[  126.719818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.721630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.722270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:52:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @remote}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}}}}, 0x0)

13:52:48 executing program 6:
syz_emit_ethernet(0x46, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x2, 0x3c, 0x0, @local, @local, {[], @ndisc_ra}}}}}, 0x0)

13:52:48 executing program 0:
r0 = eventfd2(0x0, 0x801)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="c5d591842dc721cf", 0x8}, {&(0x7f00000000c0)="93ee52744d7239b5", 0x8}], 0x2)

13:52:48 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2279, 0x0)

13:52:48 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @remote}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}}}}, 0x0)

13:52:48 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x0, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000340))
r3 = io_uring_setup(0x4e11, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x3, 0x0, 0x0, r2})
fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xa74e, 0x10, 0x0, 0x49}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), 0x0)

13:52:48 executing program 6:
syz_emit_ethernet(0x46, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x2, 0x3c, 0x0, @local, @local, {[], @ndisc_ra}}}}}, 0x0)

13:52:48 executing program 0:
r0 = eventfd2(0x0, 0x801)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="c5d591842dc721cf", 0x8}, {&(0x7f00000000c0)="93ee52744d7239b5", 0x8}], 0x2)

13:52:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x2000)=nil)

13:52:48 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x0, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000340))
r3 = io_uring_setup(0x4e11, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x3, 0x0, 0x0, r2})
fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xa74e, 0x10, 0x0, 0x49}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), 0x0)

13:52:48 executing program 0:
r0 = eventfd2(0x0, 0x801)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="c5d591842dc721cf", 0x8}, {&(0x7f00000000c0)="93ee52744d7239b5", 0x8}], 0x2)

13:52:48 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2279, 0x0)

13:52:48 executing program 6:
syz_emit_ethernet(0x46, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x2, 0x3c, 0x0, @local, @local, {[], @ndisc_ra}}}}}, 0x0)

[  126.948459] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  126.949158] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  126.949666] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  126.950132] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
13:52:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x2000)=nil)

[  126.967661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.971837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.972434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.973003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.974070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.975890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.976470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.977061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.977691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.978259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.978869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.979413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.979991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.980696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.981270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  126.981875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:52:48 executing program 7:
timer_create(0x2, 0x0, &(0x7f0000000180))
timer_delete(0x0)

13:52:48 executing program 6:
syz_emit_ethernet(0x46, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x2, 0x3c, 0x0, @local, @local, {[], @ndisc_ra}}}}}, 0x0)

13:52:48 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2279, 0x0)

13:52:48 executing program 7:
timer_create(0x2, 0x0, &(0x7f0000000180))
timer_delete(0x0)

[  127.013005] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  127.013684] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  127.014187] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  127.014660] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[  127.015455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.016008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.016582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.017130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.017747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.018332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.019585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:52:48 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x0, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000340))
r3 = io_uring_setup(0x4e11, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x3, 0x0, 0x0, r2})
fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xa74e, 0x10, 0x0, 0x49}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), 0x0)

[  127.113038] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  127.114240] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  127.114746] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  127.115213] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  127.116465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.117070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.118087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.118761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.119333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.119934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.120727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.121293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.121946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.122610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.123149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.123742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.124277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.124883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.125456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.126065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.126715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.127277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.127863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.128456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.129823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.130376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.131010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.131587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.132253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.132836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.133519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.134116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.134723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.135271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.136724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.137714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.138355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.139151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.139726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.140327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.140920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.141544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.142094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.142723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.143331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.143984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.144692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.145622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.146179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.146774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.147340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  127.147930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:52:48 executing program 1:
timer_create(0x2, 0x0, &(0x7f0000000180))
timer_delete(0x0)

[  127.253925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  127.255657] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht'
13:52:48 executing program 7:
timer_create(0x2, 0x0, &(0x7f0000000180))
timer_delete(0x0)

13:52:48 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001d000500000000000000000004"], 0x1c}], 0x1}, 0x0)

13:52:48 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x0)

13:52:48 executing program 5:
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), 0xffffffffffffffff)

13:52:48 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001640)=ANY=[], 0x8)
getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000440))

[  127.291347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  127.306503] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht'
13:52:48 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001640)=ANY=[], 0x8)
getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000440))

13:52:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x20}], 0x1}, 0x0)

13:52:48 executing program 7:
timer_create(0x2, 0x0, &(0x7f0000000180))
timer_delete(0x0)

13:52:48 executing program 1:
timer_create(0x2, 0x0, &(0x7f0000000180))
timer_delete(0x0)

13:52:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x20}], 0x1}, 0x0)

13:52:48 executing program 1:
timer_create(0x2, 0x0, &(0x7f0000000180))
timer_delete(0x0)

13:52:48 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001640)=ANY=[], 0x8)
getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000440))

13:52:48 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001d000500000000000000000004"], 0x1c}], 0x1}, 0x0)

13:52:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x20}], 0x1}, 0x0)

13:52:48 executing program 3:
syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000006252'])
chdir(&(0x7f0000000040)='./file0\x00')
creat(&(0x7f0000000300)='./file2\x00', 0xfb0c8c657719df7d)

13:52:48 executing program 5:
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), 0xffffffffffffffff)

[  127.470798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  127.475935] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht'
13:52:48 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='net/tcp\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x0)

13:52:48 executing program 7:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$ptp(r0, 0x0, 0x0)

13:52:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x20}], 0x1}, 0x0)

13:52:49 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001640)=ANY=[], 0x8)
getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000440))

13:52:49 executing program 3:
syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000006252'])
chdir(&(0x7f0000000040)='./file0\x00')
creat(&(0x7f0000000300)='./file2\x00', 0xfb0c8c657719df7d)

13:52:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001d000500000000000000000004"], 0x1c}], 0x1}, 0x0)

13:52:49 executing program 5:
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), 0xffffffffffffffff)

13:52:49 executing program 7:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$ptp(r0, 0x0, 0x0)

13:52:49 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x65, 0xffffffffffffffff, &(0x7f0000000000))

13:52:49 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)

13:52:49 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='net/tcp\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x0)

[  128.415279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  128.418095] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht'
13:52:49 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x65, 0xffffffffffffffff, &(0x7f0000000000))

13:52:49 executing program 3:
syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000006252'])
chdir(&(0x7f0000000040)='./file0\x00')
creat(&(0x7f0000000300)='./file2\x00', 0xfb0c8c657719df7d)

13:52:49 executing program 2:
r0 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000380)="dcf83f59a5179d20e8b30d337aaa3f7f0572c7890f56f69320136005c274637b2ec3af4ac226c028618deb", 0x2b}], 0x1, 0xbefe, 0x8)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x2000, 0x8, 0x1, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

13:52:50 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='net/tcp\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x0)

13:52:50 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)

13:52:50 executing program 7:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$ptp(r0, 0x0, 0x0)

13:52:50 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x65, 0xffffffffffffffff, &(0x7f0000000000))

13:52:50 executing program 5:
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), 0xffffffffffffffff)

13:52:50 executing program 3:
syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000006252'])
chdir(&(0x7f0000000040)='./file0\x00')
creat(&(0x7f0000000300)='./file2\x00', 0xfb0c8c657719df7d)

13:52:50 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)

13:52:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001d000500000000000000000004"], 0x1c}], 0x1}, 0x0)

13:52:50 executing program 2:
r0 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000380)="dcf83f59a5179d20e8b30d337aaa3f7f0572c7890f56f69320136005c274637b2ec3af4ac226c028618deb", 0x2b}], 0x1, 0xbefe, 0x8)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x2000, 0x8, 0x1, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

13:52:50 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='net/tcp\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x0)

[  129.349352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  129.358221] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht'
13:52:50 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)

13:52:50 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)

13:52:50 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x65, 0xffffffffffffffff, &(0x7f0000000000))

13:52:50 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)

13:52:51 executing program 1:
ioprio_set$pid(0x2, 0x0, 0x2007)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:52:51 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)

13:52:51 executing program 7:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$ptp(r0, 0x0, 0x0)

13:52:51 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x11, 0x0, 0x0, 0x0, @binary="d8c93112d53774fb2e1ea05d01"}, @nested={0x5, 0xa, 0x0, 0x1, [@generic="c9"]}]}, 0x2c}], 0x1}, 0x0)

13:52:51 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)

13:52:51 executing program 5:
syz_emit_ethernet(0xf6, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xc0, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x16, "f3ee2f95a1639903e0e4b3284b70b92bda2ba69452b7e345cc6763ba2e15e9eb55d9339722b99de9524fcfe8473137f0aa725dc6faf492e282acff85b837f2b736741d500720410be87b430791b02a43bc6cc9acd0cd771ca56e4643e01db2e01fa2cb667920e9e38e77e190f488807ddf8e6ceb6c792ecc1b6572f3a122476c12b237cbc531c683d1d203a3eac79406a662c617774ccaa28fc57da5c1d1af52481db6076ac2421d14aea9385d3b"}]}}}}}}, 0x0)

13:52:51 executing program 2:
r0 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000380)="dcf83f59a5179d20e8b30d337aaa3f7f0572c7890f56f69320136005c274637b2ec3af4ac226c028618deb", 0x2b}], 0x1, 0xbefe, 0x8)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x2000, 0x8, 0x1, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

13:52:51 executing program 0:
clock_getres(0x0, &(0x7f0000000000))

13:52:51 executing program 1:
ioprio_set$pid(0x2, 0x0, 0x2007)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:52:51 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)

13:52:51 executing program 1:
ioprio_set$pid(0x2, 0x0, 0x2007)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:52:51 executing program 5:
syz_emit_ethernet(0xf6, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xc0, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x16, "f3ee2f95a1639903e0e4b3284b70b92bda2ba69452b7e345cc6763ba2e15e9eb55d9339722b99de9524fcfe8473137f0aa725dc6faf492e282acff85b837f2b736741d500720410be87b430791b02a43bc6cc9acd0cd771ca56e4643e01db2e01fa2cb667920e9e38e77e190f488807ddf8e6ceb6c792ecc1b6572f3a122476c12b237cbc531c683d1d203a3eac79406a662c617774ccaa28fc57da5c1d1af52481db6076ac2421d14aea9385d3b"}]}}}}}}, 0x0)

13:52:51 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)

13:52:51 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

13:52:51 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x11, 0x0, 0x0, 0x0, @binary="d8c93112d53774fb2e1ea05d01"}, @nested={0x5, 0xa, 0x0, 0x1, [@generic="c9"]}]}, 0x2c}], 0x1}, 0x0)

13:52:51 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x8085)
close(r0)

[  130.444227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.452721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
13:52:51 executing program 1:
ioprio_set$pid(0x2, 0x0, 0x2007)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:52:51 executing program 5:
syz_emit_ethernet(0xf6, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xc0, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x16, "f3ee2f95a1639903e0e4b3284b70b92bda2ba69452b7e345cc6763ba2e15e9eb55d9339722b99de9524fcfe8473137f0aa725dc6faf492e282acff85b837f2b736741d500720410be87b430791b02a43bc6cc9acd0cd771ca56e4643e01db2e01fa2cb667920e9e38e77e190f488807ddf8e6ceb6c792ecc1b6572f3a122476c12b237cbc531c683d1d203a3eac79406a662c617774ccaa28fc57da5c1d1af52481db6076ac2421d14aea9385d3b"}]}}}}}}, 0x0)

[  130.962713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.963717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
13:52:52 executing program 5:
syz_emit_ethernet(0xf6, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xc0, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x16, "f3ee2f95a1639903e0e4b3284b70b92bda2ba69452b7e345cc6763ba2e15e9eb55d9339722b99de9524fcfe8473137f0aa725dc6faf492e282acff85b837f2b736741d500720410be87b430791b02a43bc6cc9acd0cd771ca56e4643e01db2e01fa2cb667920e9e38e77e190f488807ddf8e6ceb6c792ecc1b6572f3a122476c12b237cbc531c683d1d203a3eac79406a662c617774ccaa28fc57da5c1d1af52481db6076ac2421d14aea9385d3b"}]}}}}}}, 0x0)

13:52:52 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x11, 0x0, 0x0, 0x0, @binary="d8c93112d53774fb2e1ea05d01"}, @nested={0x5, 0xa, 0x0, 0x1, [@generic="c9"]}]}, 0x2c}], 0x1}, 0x0)

13:52:52 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x8085)
close(r0)

13:52:52 executing program 1:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x200842, 0x0)
clone(0x61021000, &(0x7f00000007c0)="30fe5e262add01e8adc79b14aab2b68e663c091f58a393537c599e9f46aa079f34dcba5f2a638c73708eba195367b885349a721af7b1682284364c8f609fc40459b3eec7eb22a7082c2cb491d30703300a1fcce635d9b7b7964b7f33af", &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="d2d261a8567f617ad9b453501a817b1df9a9053787453a16cc35")

13:52:52 executing program 0:
mq_notify(0xffffffffffffffff, 0xfffffffffffffffc)

13:52:52 executing program 2:
r0 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000380)="dcf83f59a5179d20e8b30d337aaa3f7f0572c7890f56f69320136005c274637b2ec3af4ac226c028618deb", 0x2b}], 0x1, 0xbefe, 0x8)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x2000, 0x8, 0x1, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

13:52:52 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)

13:52:52 executing program 7:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0)

13:52:52 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x11, 0x0, 0x0, 0x0, @binary="d8c93112d53774fb2e1ea05d01"}, @nested={0x5, 0xa, 0x0, 0x1, [@generic="c9"]}]}, 0x2c}], 0x1}, 0x0)

13:52:52 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x8085)
close(r0)

13:52:52 executing program 7:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0)

13:52:52 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x8085)
close(r0)

13:52:52 executing program 0:
mq_notify(0xffffffffffffffff, 0xfffffffffffffffc)

13:52:52 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f00000011c0), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r0, 0x0, r1)
write(r1, &(0x7f0000000080)="01", 0x41030)
close(r1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
r2 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xa)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)

13:52:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chroot(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_setup(0x454c, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:52:52 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc2, 0x0)

[  131.405405] loop4: detected capacity change from 0 to 40
13:52:52 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
read(r1, &(0x7f0000000180)=""/136, 0x88)
sendfile(r1, r1, 0x0, 0x100000)

13:52:52 executing program 7:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0)

13:52:52 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0)
r1 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x10, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r3, 0x4)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r4 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r4, 0x0)
perf_event_open(0x0, 0x0, 0x1, r4, 0x8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)

13:52:52 executing program 0:
mq_notify(0xffffffffffffffff, 0xfffffffffffffffc)

[  131.479791] loop5: detected capacity change from 0 to 256
[  131.535128] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  131.625242] syz-executor.4: attempt to access beyond end of device
[  131.625242] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[  131.626996] buffer_io_error: 200 callbacks suppressed
[  131.627011] Buffer I/O error on dev loop4, logical block 10, lost async page write
13:52:53 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0)
r1 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x10, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r3, 0x4)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r4 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r4, 0x0)
perf_event_open(0x0, 0x0, 0x1, r4, 0x8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)

13:52:53 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc2, 0x0)

13:52:53 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
read(r1, &(0x7f0000000180)=""/136, 0x88)
sendfile(r1, r1, 0x0, 0x100000)

13:52:53 executing program 7:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0)

13:52:53 executing program 0:
mq_notify(0xffffffffffffffff, 0xfffffffffffffffc)

13:52:53 executing program 1:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x200842, 0x0)
clone(0x61021000, &(0x7f00000007c0)="30fe5e262add01e8adc79b14aab2b68e663c091f58a393537c599e9f46aa079f34dcba5f2a638c73708eba195367b885349a721af7b1682284364c8f609fc40459b3eec7eb22a7082c2cb491d30703300a1fcce635d9b7b7964b7f33af", &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="d2d261a8567f617ad9b453501a817b1df9a9053787453a16cc35")

13:52:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chroot(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_setup(0x454c, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[  131.733495] loop4: detected capacity change from 0 to 40
13:52:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chroot(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_setup(0x454c, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[  131.781594] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  131.831386] syz-executor.4: attempt to access beyond end of device
[  131.831386] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[  131.833102] Buffer I/O error on dev loop4, logical block 10, lost async page write
[  131.866834] syz-executor.4 (4398) used greatest stack depth: 24600 bytes left
[  132.688688] syz-executor.0 (4403) used greatest stack depth: 24536 bytes left
13:52:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chroot(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_setup(0x454c, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:52:54 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
read(r1, &(0x7f0000000180)=""/136, 0x88)
sendfile(r1, r1, 0x0, 0x100000)

13:52:54 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc2, 0x0)

13:52:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chroot(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_setup(0x454c, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:52:54 executing program 1:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x200842, 0x0)
clone(0x61021000, &(0x7f00000007c0)="30fe5e262add01e8adc79b14aab2b68e663c091f58a393537c599e9f46aa079f34dcba5f2a638c73708eba195367b885349a721af7b1682284364c8f609fc40459b3eec7eb22a7082c2cb491d30703300a1fcce635d9b7b7964b7f33af", &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="d2d261a8567f617ad9b453501a817b1df9a9053787453a16cc35")

13:52:54 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chroot(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_setup(0x454c, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:52:54 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0)
r1 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x10, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r3, 0x4)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r4 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r4, 0x0)
perf_event_open(0x0, 0x0, 0x1, r4, 0x8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)

13:52:54 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f00000011c0), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r0, 0x0, r1)
write(r1, &(0x7f0000000080)="01", 0x41030)
close(r1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
r2 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xa)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)

[  132.749575] loop7: detected capacity change from 0 to 40
[  132.759999] loop4: detected capacity change from 0 to 40

VM DIAGNOSIS:
13:52:44  Registers:
info registers vcpu 0
RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b2e71 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88803eef7698
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=000000000000000d R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b2e60
RIP=ffffffff822b2ec9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fac6c25c700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4524bcd310 CR3=000000001be30000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=ffffffff862892f8 RBX=0000000000000001 RCX=00000000000204cc RDX=000000000000786c
RSI=000000000000786b RDI=ffffffff862892f8 RBP=ffff88803ee878d0 RSP=ffff88803ee877f8
R8 =0000000000000000 R9 =ffffffff85e7aaae R10=ffffed1007dd0f1c R11=000000000003603d
R12=ffff88803ee878b9 R13=ffff88803ee878d8 R14=ffff88803ee87878 R15=ffffffff81786b2d
RIP=ffffffff8111b4f4 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe09db6e6f4 CR3=0000000005226000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007fe09db7d470 00007fe09db7cf20
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f
YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000