Warning: Permanently added '[localhost]:14971' (ECDSA) to the list of known hosts.
2022/09/12 19:23:45 fuzzer started
2022/09/12 19:23:45 dialing manager at localhost:38027
syzkaller login: [   36.813513] cgroup: Unknown subsys name 'net'
[   36.906545] cgroup: Unknown subsys name 'rlimit'
2022/09/12 19:24:00 syscalls: 2215
2022/09/12 19:24:00 code coverage: enabled
2022/09/12 19:24:00 comparison tracing: enabled
2022/09/12 19:24:00 extra coverage: enabled
2022/09/12 19:24:00 setuid sandbox: enabled
2022/09/12 19:24:00 namespace sandbox: enabled
2022/09/12 19:24:00 Android sandbox: enabled
2022/09/12 19:24:00 fault injection: enabled
2022/09/12 19:24:00 leak checking: enabled
2022/09/12 19:24:00 net packet injection: enabled
2022/09/12 19:24:00 net device setup: enabled
2022/09/12 19:24:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/12 19:24:00 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/12 19:24:00 USB emulation: enabled
2022/09/12 19:24:00 hci packet injection: enabled
2022/09/12 19:24:00 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912                                          )
2022/09/12 19:24:00 802.15.4 emulation: enabled
2022/09/12 19:24:00 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/12 19:24:00 fetching corpus: 49, signal 33672/37217 (executing program)
2022/09/12 19:24:00 fetching corpus: 99, signal 44780/49872 (executing program)
2022/09/12 19:24:00 fetching corpus: 149, signal 57970/64379 (executing program)
2022/09/12 19:24:01 fetching corpus: 199, signal 66881/74607 (executing program)
2022/09/12 19:24:01 fetching corpus: 249, signal 74964/83894 (executing program)
2022/09/12 19:24:01 fetching corpus: 299, signal 79178/89370 (executing program)
2022/09/12 19:24:01 fetching corpus: 349, signal 85132/96446 (executing program)
2022/09/12 19:24:01 fetching corpus: 399, signal 89337/101783 (executing program)
2022/09/12 19:24:01 fetching corpus: 449, signal 94950/108372 (executing program)
2022/09/12 19:24:01 fetching corpus: 499, signal 99011/113435 (executing program)
2022/09/12 19:24:02 fetching corpus: 549, signal 102754/118217 (executing program)
2022/09/12 19:24:02 fetching corpus: 599, signal 105502/121959 (executing program)
2022/09/12 19:24:02 fetching corpus: 649, signal 107681/125193 (executing program)
2022/09/12 19:24:02 fetching corpus: 699, signal 110236/128744 (executing program)
2022/09/12 19:24:02 fetching corpus: 749, signal 113271/132648 (executing program)
2022/09/12 19:24:02 fetching corpus: 799, signal 116879/137050 (executing program)
2022/09/12 19:24:02 fetching corpus: 849, signal 119262/140356 (executing program)
2022/09/12 19:24:02 fetching corpus: 899, signal 122514/144354 (executing program)
2022/09/12 19:24:03 fetching corpus: 949, signal 124528/147250 (executing program)
2022/09/12 19:24:03 fetching corpus: 999, signal 127869/151222 (executing program)
2022/09/12 19:24:03 fetching corpus: 1049, signal 129838/154027 (executing program)
2022/09/12 19:24:03 fetching corpus: 1099, signal 131922/156885 (executing program)
2022/09/12 19:24:03 fetching corpus: 1149, signal 134309/159950 (executing program)
2022/09/12 19:24:03 fetching corpus: 1199, signal 136114/162578 (executing program)
2022/09/12 19:24:03 fetching corpus: 1249, signal 138604/165692 (executing program)
2022/09/12 19:24:04 fetching corpus: 1299, signal 140847/168588 (executing program)
2022/09/12 19:24:04 fetching corpus: 1349, signal 142561/171012 (executing program)
2022/09/12 19:24:04 fetching corpus: 1399, signal 144360/173470 (executing program)
2022/09/12 19:24:04 fetching corpus: 1449, signal 147377/176855 (executing program)
2022/09/12 19:24:04 fetching corpus: 1499, signal 149368/179368 (executing program)
2022/09/12 19:24:04 fetching corpus: 1549, signal 150595/181370 (executing program)
2022/09/12 19:24:04 fetching corpus: 1599, signal 152406/183745 (executing program)
2022/09/12 19:24:04 fetching corpus: 1649, signal 154002/185912 (executing program)
2022/09/12 19:24:05 fetching corpus: 1699, signal 155530/188019 (executing program)
2022/09/12 19:24:05 fetching corpus: 1749, signal 157148/190175 (executing program)
2022/09/12 19:24:05 fetching corpus: 1799, signal 158694/192208 (executing program)
2022/09/12 19:24:05 fetching corpus: 1849, signal 160105/194197 (executing program)
2022/09/12 19:24:05 fetching corpus: 1899, signal 161559/196250 (executing program)
2022/09/12 19:24:05 fetching corpus: 1949, signal 162909/198137 (executing program)
2022/09/12 19:24:05 fetching corpus: 1999, signal 164609/200214 (executing program)
2022/09/12 19:24:06 fetching corpus: 2049, signal 166185/202177 (executing program)
2022/09/12 19:24:06 fetching corpus: 2099, signal 167531/203945 (executing program)
2022/09/12 19:24:06 fetching corpus: 2149, signal 168559/205538 (executing program)
2022/09/12 19:24:06 fetching corpus: 2199, signal 169985/207346 (executing program)
2022/09/12 19:24:06 fetching corpus: 2249, signal 171303/209044 (executing program)
2022/09/12 19:24:06 fetching corpus: 2299, signal 172270/210519 (executing program)
2022/09/12 19:24:06 fetching corpus: 2349, signal 173109/211899 (executing program)
2022/09/12 19:24:07 fetching corpus: 2399, signal 174557/213686 (executing program)
2022/09/12 19:24:07 fetching corpus: 2449, signal 176363/215644 (executing program)
2022/09/12 19:24:07 fetching corpus: 2499, signal 176973/216797 (executing program)
2022/09/12 19:24:07 fetching corpus: 2549, signal 177930/218197 (executing program)
2022/09/12 19:24:07 fetching corpus: 2599, signal 179544/220051 (executing program)
2022/09/12 19:24:07 fetching corpus: 2649, signal 180908/221657 (executing program)
2022/09/12 19:24:07 fetching corpus: 2699, signal 182247/223261 (executing program)
2022/09/12 19:24:08 fetching corpus: 2749, signal 183265/224612 (executing program)
2022/09/12 19:24:08 fetching corpus: 2799, signal 184438/226035 (executing program)
2022/09/12 19:24:08 fetching corpus: 2849, signal 185780/227563 (executing program)
2022/09/12 19:24:08 fetching corpus: 2899, signal 186882/228951 (executing program)
2022/09/12 19:24:08 fetching corpus: 2949, signal 187802/230179 (executing program)
2022/09/12 19:24:08 fetching corpus: 2999, signal 188839/231506 (executing program)
2022/09/12 19:24:08 fetching corpus: 3049, signal 189849/232790 (executing program)
2022/09/12 19:24:09 fetching corpus: 3099, signal 190970/234102 (executing program)
2022/09/12 19:24:09 fetching corpus: 3149, signal 192472/235666 (executing program)
2022/09/12 19:24:09 fetching corpus: 3199, signal 193597/236976 (executing program)
2022/09/12 19:24:09 fetching corpus: 3249, signal 194781/238312 (executing program)
2022/09/12 19:24:09 fetching corpus: 3299, signal 195970/239650 (executing program)
2022/09/12 19:24:09 fetching corpus: 3349, signal 196603/240588 (executing program)
2022/09/12 19:24:10 fetching corpus: 3399, signal 197685/241798 (executing program)
2022/09/12 19:24:10 fetching corpus: 3449, signal 198480/242898 (executing program)
2022/09/12 19:24:10 fetching corpus: 3499, signal 199109/243860 (executing program)
2022/09/12 19:24:10 fetching corpus: 3549, signal 200155/245068 (executing program)
2022/09/12 19:24:10 fetching corpus: 3599, signal 201321/246279 (executing program)
2022/09/12 19:24:10 fetching corpus: 3649, signal 202131/247311 (executing program)
2022/09/12 19:24:11 fetching corpus: 3699, signal 203665/248691 (executing program)
2022/09/12 19:24:11 fetching corpus: 3749, signal 204402/249666 (executing program)
2022/09/12 19:24:11 fetching corpus: 3799, signal 204900/250477 (executing program)
2022/09/12 19:24:11 fetching corpus: 3849, signal 205603/251407 (executing program)
2022/09/12 19:24:11 fetching corpus: 3899, signal 206424/252367 (executing program)
2022/09/12 19:24:11 fetching corpus: 3949, signal 207990/253617 (executing program)
2022/09/12 19:24:11 fetching corpus: 3999, signal 209181/254703 (executing program)
2022/09/12 19:24:11 fetching corpus: 4049, signal 209926/255578 (executing program)
2022/09/12 19:24:12 fetching corpus: 4099, signal 210739/256507 (executing program)
2022/09/12 19:24:12 fetching corpus: 4149, signal 211284/257269 (executing program)
2022/09/12 19:24:12 fetching corpus: 4199, signal 211880/258058 (executing program)
2022/09/12 19:24:12 fetching corpus: 4249, signal 212548/258897 (executing program)
2022/09/12 19:24:12 fetching corpus: 4299, signal 213146/259666 (executing program)
2022/09/12 19:24:12 fetching corpus: 4349, signal 213997/260575 (executing program)
2022/09/12 19:24:12 fetching corpus: 4399, signal 214624/261315 (executing program)
2022/09/12 19:24:13 fetching corpus: 4449, signal 215364/262143 (executing program)
2022/09/12 19:24:13 fetching corpus: 4498, signal 216281/263027 (executing program)
2022/09/12 19:24:13 fetching corpus: 4548, signal 217185/263915 (executing program)
2022/09/12 19:24:13 fetching corpus: 4598, signal 218063/264759 (executing program)
2022/09/12 19:24:13 fetching corpus: 4648, signal 218709/265495 (executing program)
2022/09/12 19:24:13 fetching corpus: 4698, signal 219344/266204 (executing program)
2022/09/12 19:24:13 fetching corpus: 4748, signal 219873/266896 (executing program)
2022/09/12 19:24:14 fetching corpus: 4798, signal 220720/267651 (executing program)
2022/09/12 19:24:14 fetching corpus: 4848, signal 221467/268419 (executing program)
2022/09/12 19:24:14 fetching corpus: 4898, signal 222213/269129 (executing program)
2022/09/12 19:24:14 fetching corpus: 4948, signal 222735/269742 (executing program)
2022/09/12 19:24:14 fetching corpus: 4998, signal 223597/270466 (executing program)
2022/09/12 19:24:14 fetching corpus: 5048, signal 224341/271134 (executing program)
2022/09/12 19:24:14 fetching corpus: 5098, signal 224840/271780 (executing program)
2022/09/12 19:24:14 fetching corpus: 5148, signal 225575/272442 (executing program)
2022/09/12 19:24:15 fetching corpus: 5198, signal 226501/273147 (executing program)
2022/09/12 19:24:15 fetching corpus: 5248, signal 227079/273797 (executing program)
2022/09/12 19:24:15 fetching corpus: 5298, signal 227684/274377 (executing program)
2022/09/12 19:24:15 fetching corpus: 5348, signal 228965/275127 (executing program)
2022/09/12 19:24:15 fetching corpus: 5398, signal 229583/275730 (executing program)
2022/09/12 19:24:15 fetching corpus: 5448, signal 230439/276425 (executing program)
2022/09/12 19:24:15 fetching corpus: 5498, signal 231197/277057 (executing program)
2022/09/12 19:24:16 fetching corpus: 5548, signal 231704/277601 (executing program)
2022/09/12 19:24:16 fetching corpus: 5598, signal 232297/278159 (executing program)
2022/09/12 19:24:16 fetching corpus: 5648, signal 232877/278691 (executing program)
2022/09/12 19:24:16 fetching corpus: 5698, signal 233243/279162 (executing program)
2022/09/12 19:24:16 fetching corpus: 5748, signal 233910/279662 (executing program)
2022/09/12 19:24:16 fetching corpus: 5798, signal 234411/280168 (executing program)
2022/09/12 19:24:16 fetching corpus: 5848, signal 234742/280627 (executing program)
2022/09/12 19:24:17 fetching corpus: 5898, signal 235509/281137 (executing program)
2022/09/12 19:24:17 fetching corpus: 5948, signal 236006/281657 (executing program)
2022/09/12 19:24:17 fetching corpus: 5998, signal 236401/282069 (executing program)
2022/09/12 19:24:17 fetching corpus: 6048, signal 237185/282659 (executing program)
2022/09/12 19:24:17 fetching corpus: 6098, signal 237753/283120 (executing program)
2022/09/12 19:24:17 fetching corpus: 6148, signal 238214/283538 (executing program)
2022/09/12 19:24:17 fetching corpus: 6198, signal 238894/283974 (executing program)
2022/09/12 19:24:17 fetching corpus: 6247, signal 239597/284429 (executing program)
2022/09/12 19:24:18 fetching corpus: 6297, signal 240266/284870 (executing program)
2022/09/12 19:24:18 fetching corpus: 6347, signal 240880/285309 (executing program)
2022/09/12 19:24:18 fetching corpus: 6397, signal 241687/285711 (executing program)
2022/09/12 19:24:18 fetching corpus: 6447, signal 242406/286123 (executing program)
2022/09/12 19:24:18 fetching corpus: 6497, signal 242835/286488 (executing program)
2022/09/12 19:24:18 fetching corpus: 6547, signal 243632/286901 (executing program)
2022/09/12 19:24:18 fetching corpus: 6597, signal 244341/287272 (executing program)
2022/09/12 19:24:19 fetching corpus: 6647, signal 245039/287668 (executing program)
2022/09/12 19:24:19 fetching corpus: 6697, signal 245452/288020 (executing program)
2022/09/12 19:24:19 fetching corpus: 6747, signal 246435/288405 (executing program)
2022/09/12 19:24:19 fetching corpus: 6797, signal 246803/288750 (executing program)
2022/09/12 19:24:19 fetching corpus: 6847, signal 247545/289083 (executing program)
2022/09/12 19:24:19 fetching corpus: 6897, signal 248292/289400 (executing program)
2022/09/12 19:24:19 fetching corpus: 6947, signal 248672/289691 (executing program)
2022/09/12 19:24:20 fetching corpus: 6997, signal 249150/290008 (executing program)
2022/09/12 19:24:20 fetching corpus: 7047, signal 249489/290263 (executing program)
2022/09/12 19:24:20 fetching corpus: 7097, signal 250045/290337 (executing program)
2022/09/12 19:24:20 fetching corpus: 7147, signal 250735/290415 (executing program)
2022/09/12 19:24:20 fetching corpus: 7197, signal 251228/290429 (executing program)
2022/09/12 19:24:20 fetching corpus: 7247, signal 251845/290452 (executing program)
2022/09/12 19:24:20 fetching corpus: 7297, signal 252531/290508 (executing program)
2022/09/12 19:24:21 fetching corpus: 7347, signal 253219/290517 (executing program)
2022/09/12 19:24:21 fetching corpus: 7397, signal 253819/290531 (executing program)
2022/09/12 19:24:21 fetching corpus: 7447, signal 254331/290555 (executing program)
2022/09/12 19:24:21 fetching corpus: 7497, signal 254789/290663 (executing program)
2022/09/12 19:24:21 fetching corpus: 7547, signal 255128/290664 (executing program)
2022/09/12 19:24:21 fetching corpus: 7597, signal 255391/290670 (executing program)
2022/09/12 19:24:21 fetching corpus: 7647, signal 255858/290674 (executing program)
2022/09/12 19:24:21 fetching corpus: 7697, signal 256227/290699 (executing program)
2022/09/12 19:24:22 fetching corpus: 7747, signal 256622/290709 (executing program)
2022/09/12 19:24:22 fetching corpus: 7797, signal 256983/290716 (executing program)
2022/09/12 19:24:22 fetching corpus: 7847, signal 257668/290731 (executing program)
2022/09/12 19:24:22 fetching corpus: 7897, signal 257975/290740 (executing program)
2022/09/12 19:24:22 fetching corpus: 7947, signal 258408/290751 (executing program)
2022/09/12 19:24:22 fetching corpus: 7997, signal 258895/290753 (executing program)
2022/09/12 19:24:22 fetching corpus: 8047, signal 259355/290771 (executing program)
2022/09/12 19:24:23 fetching corpus: 8097, signal 259630/290784 (executing program)
2022/09/12 19:24:23 fetching corpus: 8147, signal 259945/290793 (executing program)
2022/09/12 19:24:23 fetching corpus: 8197, signal 260436/290801 (executing program)
2022/09/12 19:24:23 fetching corpus: 8247, signal 260986/290803 (executing program)
2022/09/12 19:24:23 fetching corpus: 8297, signal 261432/290810 (executing program)
2022/09/12 19:24:23 fetching corpus: 8347, signal 261860/290815 (executing program)
2022/09/12 19:24:23 fetching corpus: 8397, signal 262741/290842 (executing program)
2022/09/12 19:24:24 fetching corpus: 8447, signal 263107/290846 (executing program)
2022/09/12 19:24:24 fetching corpus: 8497, signal 263472/290890 (executing program)
2022/09/12 19:24:24 fetching corpus: 8547, signal 264103/290903 (executing program)
2022/09/12 19:24:24 fetching corpus: 8597, signal 264583/290911 (executing program)
2022/09/12 19:24:24 fetching corpus: 8647, signal 265174/290915 (executing program)
2022/09/12 19:24:24 fetching corpus: 8697, signal 265978/290937 (executing program)
2022/09/12 19:24:25 fetching corpus: 8747, signal 266663/290949 (executing program)
2022/09/12 19:24:25 fetching corpus: 8797, signal 267312/290988 (executing program)
2022/09/12 19:24:25 fetching corpus: 8847, signal 267830/291075 (executing program)
2022/09/12 19:24:25 fetching corpus: 8897, signal 268473/291157 (executing program)
2022/09/12 19:24:25 fetching corpus: 8947, signal 269040/291187 (executing program)
2022/09/12 19:24:25 fetching corpus: 8997, signal 269370/291190 (executing program)
2022/09/12 19:24:26 fetching corpus: 9047, signal 269714/291190 (executing program)
2022/09/12 19:24:26 fetching corpus: 9097, signal 269996/291197 (executing program)
2022/09/12 19:24:26 fetching corpus: 9147, signal 270401/291222 (executing program)
2022/09/12 19:24:26 fetching corpus: 9197, signal 270960/291226 (executing program)
2022/09/12 19:24:26 fetching corpus: 9247, signal 271527/291234 (executing program)
2022/09/12 19:24:26 fetching corpus: 9297, signal 271874/291275 (executing program)
2022/09/12 19:24:26 fetching corpus: 9347, signal 272106/291278 (executing program)
2022/09/12 19:24:26 fetching corpus: 9397, signal 272679/291288 (executing program)
2022/09/12 19:24:27 fetching corpus: 9447, signal 273144/291319 (executing program)
2022/09/12 19:24:27 fetching corpus: 9497, signal 273836/291319 (executing program)
2022/09/12 19:24:27 fetching corpus: 9547, signal 274213/291324 (executing program)
2022/09/12 19:24:27 fetching corpus: 9597, signal 274466/291336 (executing program)
2022/09/12 19:24:27 fetching corpus: 9647, signal 274846/291343 (executing program)
2022/09/12 19:24:27 fetching corpus: 9697, signal 275370/291344 (executing program)
2022/09/12 19:24:28 fetching corpus: 9747, signal 276380/291508 (executing program)
2022/09/12 19:24:28 fetching corpus: 9797, signal 276714/291534 (executing program)
2022/09/12 19:24:28 fetching corpus: 9847, signal 276985/291549 (executing program)
2022/09/12 19:24:28 fetching corpus: 9897, signal 277452/291590 (executing program)
2022/09/12 19:24:28 fetching corpus: 9947, signal 277830/291604 (executing program)
2022/09/12 19:24:28 fetching corpus: 9997, signal 278210/291608 (executing program)
2022/09/12 19:24:28 fetching corpus: 10047, signal 278500/291615 (executing program)
2022/09/12 19:24:28 fetching corpus: 10097, signal 279014/291679 (executing program)
2022/09/12 19:24:29 fetching corpus: 10147, signal 279213/291716 (executing program)
2022/09/12 19:24:29 fetching corpus: 10197, signal 279450/291717 (executing program)
2022/09/12 19:24:29 fetching corpus: 10247, signal 279963/291772 (executing program)
2022/09/12 19:24:29 fetching corpus: 10297, signal 280223/291777 (executing program)
2022/09/12 19:24:29 fetching corpus: 10300, signal 280240/291778 (executing program)
2022/09/12 19:24:29 fetching corpus: 10300, signal 280240/291778 (executing program)
2022/09/12 19:24:31 starting 8 fuzzer processes
19:24:31 executing program 0:
syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x2c, 0x30, 0x0]}}}}]})

19:24:31 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
pwritev2(r0, &(0x7f0000001840)=[{&(0x7f00000017c0)="04", 0x1}], 0x1, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x2, [{}, {}]})

19:24:31 executing program 1:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
r3 = socket$inet6(0xa, 0x0, 0x7)
fcntl$notify(r3, 0x402, 0x80000000)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c6465bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d00"/236, 0xec}], 0x1, 0x6, 0x2, 0xf)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r4, r4, 0x0, 0x100000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000013c0)={0x2, [], 0x4, "56325e6891892a"})

19:24:31 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
getpeername(r0, 0x0, &(0x7f0000000140))

19:24:31 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x4}})

[   82.320201] audit: type=1400 audit(1663010671.369:6): avc:  denied  { execmem } for  pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:24:31 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r1 = open(0x0, 0x0, 0x80)
ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = io_uring_setup(0x474c, &(0x7f0000000240))
sendfile(r2, r3, &(0x7f0000000180)=0x800, 0x7)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

19:24:31 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xa, 0x16, 0x0, 0x1, [@generic="aca88e14ff81"]}]}, 0x20}], 0x1}, 0x0)

19:24:31 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=unix,', {[{@msize}]}})

[   83.605684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.608181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.609417] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.612556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.615447] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.616557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.620981] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   83.622173] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.624901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.628941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.630542] Bluetooth: hci0: HCI_REQ-0x0c1a
[   83.631301] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   83.665413] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.667584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.669522] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   83.671500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   83.672070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   83.678601] Bluetooth: hci1: HCI_REQ-0x0c1a
[   83.698958] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   83.698957] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   83.699573] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.701883] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   83.702168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   83.707399] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   83.708545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.712813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   83.713490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.716354] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   83.717312] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   83.718557] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   83.719555] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   83.721135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   83.722324] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   83.724656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.725402] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   83.734409] Bluetooth: hci7: HCI_REQ-0x0c1a
[   83.744490] Bluetooth: hci5: HCI_REQ-0x0c1a
[   83.750899] Bluetooth: hci4: HCI_REQ-0x0c1a
[   83.767971] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   83.773802] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   83.775977] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   83.791856] Bluetooth: hci6: HCI_REQ-0x0c1a
[   85.680952] Bluetooth: hci3: Opcode 0x c03 failed: -110
[   85.682505] Bluetooth: hci0: command 0x0409 tx timeout
[   85.683435] Bluetooth: hci2: Opcode 0x c03 failed: -110
[   85.745024] Bluetooth: hci7: command 0x0409 tx timeout
[   85.746346] Bluetooth: hci1: command 0x0409 tx timeout
[   85.808824] Bluetooth: hci6: command 0x0409 tx timeout
[   85.809473] Bluetooth: hci5: command 0x0409 tx timeout
[   85.810129] Bluetooth: hci4: command 0x0409 tx timeout
[   87.728987] Bluetooth: hci0: command 0x041b tx timeout
[   87.792866] Bluetooth: hci1: command 0x041b tx timeout
[   87.794015] Bluetooth: hci7: command 0x041b tx timeout
[   87.856877] Bluetooth: hci4: command 0x041b tx timeout
[   87.858194] Bluetooth: hci5: command 0x041b tx timeout
[   87.858901] Bluetooth: hci6: command 0x041b tx timeout
[   89.777234] Bluetooth: hci0: command 0x040f tx timeout
[   89.802378] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.803278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.805342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.816536] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.818648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   89.819337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.825820] Bluetooth: hci3: HCI_REQ-0x0c1a
[   89.840816] Bluetooth: hci7: command 0x040f tx timeout
[   89.841321] Bluetooth: hci1: command 0x040f tx timeout
[   89.904872] Bluetooth: hci6: command 0x040f tx timeout
[   89.906415] Bluetooth: hci5: command 0x040f tx timeout
[   89.906859] Bluetooth: hci4: command 0x040f tx timeout
[   91.377180] Bluetooth: hci2: Opcode 0x c03 failed: -110
[   91.824846] Bluetooth: hci0: command 0x0419 tx timeout
[   91.888846] Bluetooth: hci1: command 0x0419 tx timeout
[   91.889306] Bluetooth: hci7: command 0x0419 tx timeout
[   91.889710] Bluetooth: hci3: command 0x0409 tx timeout
[   91.952864] Bluetooth: hci4: command 0x0419 tx timeout
[   91.953922] Bluetooth: hci5: command 0x0419 tx timeout
[   91.954326] Bluetooth: hci6: command 0x0419 tx timeout
[   93.936797] Bluetooth: hci3: command 0x041b tx timeout
[   94.367466] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.375250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.378671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.388866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.391442] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   94.392413] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.396246] Bluetooth: hci2: HCI_REQ-0x0c1a
[   95.984842] Bluetooth: hci3: command 0x040f tx timeout
[   96.432841] Bluetooth: hci2: command 0x0409 tx timeout
[   98.032905] Bluetooth: hci3: command 0x0419 tx timeout
[   98.480842] Bluetooth: hci2: command 0x041b tx timeout
[  100.528839] Bluetooth: hci2: command 0x040f tx timeout
[  102.576805] Bluetooth: hci2: command 0x0419 tx timeout
19:25:27 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140))

19:25:27 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x200842, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="03000000000000bc2186382458468ed2b83a00666973653000"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  138.797593] audit: type=1400 audit(1663010727.847:7): avc:  denied  { open } for  pid=3657 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  138.800526] audit: type=1400 audit(1663010727.847:8): avc:  denied  { kernel } for  pid=3657 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  138.826496] hrtimer: interrupt took 26900 ns
[  138.828353] ------------[ cut here ]------------
[  138.828386] 
[  138.828390] ======================================================
[  138.828396] WARNING: possible circular locking dependency detected
[  138.828403] 6.0.0-rc5-next-20220912 #1 Not tainted
[  138.828415] ------------------------------------------------------
[  138.828421] syz-executor.2/3661 is trying to acquire lock:
[  138.828432] ffffffff853fa878 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0xe/0x70
[  138.828496] 
[  138.828496] but task is already holding lock:
[  138.828500] ffff88800f401020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  138.828551] 
[  138.828551] which lock already depends on the new lock.
[  138.828551] 
[  138.828556] 
[  138.828556] the existing dependency chain (in reverse order) is:
[  138.828562] 
[  138.828562] -> #3 (&ctx->lock){....}-{2:2}:
[  138.828587]        _raw_spin_lock+0x2a/0x40
[  138.828618]        __perf_event_task_sched_out+0x53b/0x18d0
[  138.828642]        __schedule+0xedd/0x2470
[  138.828662]        preempt_schedule_common+0x45/0xc0
[  138.828684]        __cond_resched+0x17/0x30
[  138.828702]        __mutex_lock+0xa3/0x14d0
[  138.828723]        __do_sys_perf_event_open+0x1eec/0x32c0
[  138.828747]        do_syscall_64+0x3b/0x90
[  138.828772]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  138.828804] 
[  138.828804] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  138.828830]        _raw_spin_lock_nested+0x30/0x40
[  138.828857]        raw_spin_rq_lock_nested+0x1e/0x30
[  138.828881]        task_fork_fair+0x63/0x4d0
[  138.828914]        sched_cgroup_fork+0x3d0/0x540
[  138.828941]        copy_process+0x3f9e/0x6df0
[  138.828959]        kernel_clone+0xe7/0x890
[  138.828977]        user_mode_thread+0xad/0xf0
[  138.828997]        rest_init+0x24/0x250
[  138.829027]        arch_call_rest_init+0xf/0x14
[  138.829061]        start_kernel+0x4c1/0x4e6
[  138.829093]        secondary_startup_64_no_verify+0xe0/0xeb
[  138.829119] 
[  138.829119] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  138.829144]        _raw_spin_lock_irqsave+0x39/0x60
[  138.829173]        try_to_wake_up+0xab/0x1920
[  138.829198]        up+0x75/0xb0
[  138.829219]        __up_console_sem+0x6e/0x80
[  138.829249]        console_unlock+0x46a/0x590
[  138.829280]        vt_ioctl+0x2822/0x2ca0
[  138.829302]        tty_ioctl+0x7c4/0x1700
[  138.829322]        __x64_sys_ioctl+0x19a/0x210
[  138.829350]        do_syscall_64+0x3b/0x90
[  138.829374]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  138.829406] 
[  138.829406] -> #0 ((console_sem).lock){-...}-{2:2}:
[  138.829431]        __lock_acquire+0x2a02/0x5e70
[  138.829463]        lock_acquire+0x1a2/0x530
[  138.829493]        _raw_spin_lock_irqsave+0x39/0x60
[  138.829521]        down_trylock+0xe/0x70
[  138.829545]        __down_trylock_console_sem+0x3b/0xd0
[  138.829576]        vprintk_emit+0x16b/0x560
[  138.829608]        vprintk+0x84/0xa0
[  138.829639]        _printk+0xba/0xf1
[  138.829671]        report_bug.cold+0x72/0xab
[  138.829694]        handle_bug+0x3c/0x70
[  138.829717]        exc_invalid_op+0x14/0x50
[  138.829742]        asm_exc_invalid_op+0x16/0x20
[  138.829772]        group_sched_out.part.0+0x2c7/0x460
[  138.829792]        ctx_sched_out+0x8f1/0xc10
[  138.829810]        __perf_event_task_sched_out+0x6d0/0x18d0
[  138.829834]        __schedule+0xedd/0x2470
[  138.829851]        preempt_schedule_common+0x45/0xc0
[  138.829871]        __cond_resched+0x17/0x30
[  138.829889]        __mutex_lock+0xa3/0x14d0
[  138.829910]        __do_sys_perf_event_open+0x1eec/0x32c0
[  138.829934]        do_syscall_64+0x3b/0x90
[  138.829958]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  138.829990] 
[  138.829990] other info that might help us debug this:
[  138.829990] 
[  138.829995] Chain exists of:
[  138.829995]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  138.829995] 
[  138.830022]  Possible unsafe locking scenario:
[  138.830022] 
[  138.830026]        CPU0                    CPU1
[  138.830031]        ----                    ----
[  138.830035]   lock(&ctx->lock);
[  138.830045]                                lock(&rq->__lock);
[  138.830057]                                lock(&ctx->lock);
[  138.830068]   lock((console_sem).lock);
[  138.830079] 
[  138.830079]  *** DEADLOCK ***
[  138.830079] 
[  138.830083] 2 locks held by syz-executor.2/3661:
[  138.830095]  #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  138.830142]  #1: ffff88800f401020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  138.830194] 
[  138.830194] stack backtrace:
[  138.830199] CPU: 1 PID: 3661 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220912 #1
[  138.830222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  138.830236] Call Trace:
[  138.830242]  <TASK>
[  138.830249]  dump_stack_lvl+0x8b/0xb3
[  138.830276]  check_noncircular+0x263/0x2e0
[  138.830308]  ? format_decode+0x26c/0xb50
[  138.830334]  ? print_circular_bug+0x450/0x450
[  138.830367]  ? enable_ptr_key_workfn+0x20/0x20
[  138.830393]  ? __lockdep_reset_lock+0x180/0x180
[  138.830425]  ? format_decode+0x26c/0xb50
[  138.830453]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  138.830487]  __lock_acquire+0x2a02/0x5e70
[  138.830528]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  138.830571]  lock_acquire+0x1a2/0x530
[  138.830603]  ? down_trylock+0xe/0x70
[  138.830631]  ? rcu_read_unlock+0x40/0x40
[  138.830667]  ? find_held_lock+0x2c/0x110
[  138.830699]  ? vprintk+0x84/0xa0
[  138.830733]  _raw_spin_lock_irqsave+0x39/0x60
[  138.830762]  ? down_trylock+0xe/0x70
[  138.830788]  down_trylock+0xe/0x70
[  138.830813]  ? vprintk+0x84/0xa0
[  138.830846]  __down_trylock_console_sem+0x3b/0xd0
[  138.830880]  vprintk_emit+0x16b/0x560
[  138.830916]  vprintk+0x84/0xa0
[  138.830950]  _printk+0xba/0xf1
[  138.830982]  ? record_print_text.cold+0x16/0x16
[  138.831021]  ? hrtimer_try_to_cancel+0x163/0x2c0
[  138.831046]  ? lock_downgrade+0x6d0/0x6d0
[  138.831080]  ? report_bug.cold+0x66/0xab
[  138.831106]  ? group_sched_out.part.0+0x2c7/0x460
[  138.831128]  report_bug.cold+0x72/0xab
[  138.831156]  handle_bug+0x3c/0x70
[  138.831181]  exc_invalid_op+0x14/0x50
[  138.831208]  asm_exc_invalid_op+0x16/0x20
[  138.831240] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  138.831264] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  138.831286] RSP: 0018:ffff888020caf978 EFLAGS: 00010006
[  138.831303] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  138.831317] RDX: ffff88801b2a3580 RSI: ffffffff81566027 RDI: 0000000000000005
[  138.831331] RBP: ffff8880434c0000 R08: 0000000000000005 R09: 0000000000000001
[  138.831345] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f401000
[  138.831359] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002
[  138.831379]  ? group_sched_out.part.0+0x2c7/0x460
[  138.831404]  ? group_sched_out.part.0+0x2c7/0x460
[  138.831429]  ctx_sched_out+0x8f1/0xc10
[  138.831452]  __perf_event_task_sched_out+0x6d0/0x18d0
[  138.831482]  ? lock_is_held_type+0xd7/0x130
[  138.831517]  ? __perf_cgroup_move+0x160/0x160
[  138.831539]  ? set_next_entity+0x304/0x550
[  138.831573]  ? update_curr+0x267/0x740
[  138.831609]  ? lock_is_held_type+0xd7/0x130
[  138.831643]  __schedule+0xedd/0x2470
[  138.831669]  ? io_schedule_timeout+0x150/0x150
[  138.831692]  ? lock_is_held_type+0xd7/0x130
[  138.831735]  ? lock_is_held_type+0xd7/0x130
[  138.831768]  ? __cond_resched+0x17/0x30
[  138.831789]  preempt_schedule_common+0x45/0xc0
[  138.831813]  __cond_resched+0x17/0x30
[  138.831832]  __mutex_lock+0xa3/0x14d0
[  138.831857]  ? __do_sys_perf_event_open+0x1eec/0x32c0
[  138.831885]  ? mutex_lock_io_nested+0x1310/0x1310
[  138.831911]  ? __up_read+0x192/0x730
[  138.831939]  ? up_write+0x480/0x480
[  138.831971]  __do_sys_perf_event_open+0x1eec/0x32c0
[  138.832003]  ? perf_compat_ioctl+0x130/0x130
[  138.832027]  ? xfd_validate_state+0x59/0x180
[  138.832070]  ? syscall_enter_from_user_mode+0x1d/0x50
[  138.832105]  ? syscall_enter_from_user_mode+0x1d/0x50
[  138.832143]  do_syscall_64+0x3b/0x90
[  138.832169]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  138.832202] RIP: 0033:0x7f1e530e1b19
[  138.832218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  138.832239] RSP: 002b:00007f1e50657188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  138.832259] RAX: ffffffffffffffda RBX: 00007f1e531f4f60 RCX: 00007f1e530e1b19
[  138.832273] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280
[  138.832287] RBP: 00007f1e5313bf6d R08: 0000000000000000 R09: 0000000000000000
[  138.832301] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  138.832314] R13: 00007ffe3a86fb2f R14: 00007f1e50657300 R15: 0000000000022000
[  138.832339]  </TASK>
[  138.945030] WARNING: CPU: 1 PID: 3661 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  138.946448] Modules linked in:
[  138.946931] CPU: 1 PID: 3661 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220912 #1
[  138.948174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  138.949832] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  138.950674] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  138.953432] RSP: 0018:ffff888020caf978 EFLAGS: 00010006
[  138.954155] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  138.955109] RDX: ffff88801b2a3580 RSI: ffffffff81566027 RDI: 0000000000000005
[  138.956070] RBP: ffff8880434c0000 R08: 0000000000000005 R09: 0000000000000001
[  138.957116] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f401000
[  138.958154] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002
[  138.959202] FS:  00007f1e50657700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  138.960411] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.961287] CR2: 00007fb71cafc620 CR3: 0000000015e5e000 CR4: 0000000000350ee0
[  138.962345] Call Trace:
[  138.962737]  <TASK>
[  138.963085]  ctx_sched_out+0x8f1/0xc10
[  138.963678]  __perf_event_task_sched_out+0x6d0/0x18d0
[  138.964464]  ? lock_is_held_type+0xd7/0x130
[  138.965118]  ? __perf_cgroup_move+0x160/0x160
[  138.965788]  ? set_next_entity+0x304/0x550
[  138.966439]  ? update_curr+0x267/0x740
[  138.967036]  ? lock_is_held_type+0xd7/0x130
[  138.967686]  __schedule+0xedd/0x2470
[  138.968395]  ? io_schedule_timeout+0x150/0x150
[  138.969160]  ? lock_is_held_type+0xd7/0x130
[  138.969893]  ? lock_is_held_type+0xd7/0x130
[  138.970619]  ? __cond_resched+0x17/0x30
[  138.971279]  preempt_schedule_common+0x45/0xc0
[  138.972070]  __cond_resched+0x17/0x30
[  138.972706]  __mutex_lock+0xa3/0x14d0
[  138.973344]  ? __do_sys_perf_event_open+0x1eec/0x32c0
[  138.974204]  ? mutex_lock_io_nested+0x1310/0x1310
[  138.975007]  ? __up_read+0x192/0x730
[  138.975638]  ? up_write+0x480/0x480
[  138.976280]  __do_sys_perf_event_open+0x1eec/0x32c0
[  138.977118]  ? perf_compat_ioctl+0x130/0x130
[  138.977854]  ? xfd_validate_state+0x59/0x180
[  138.978612]  ? syscall_enter_from_user_mode+0x1d/0x50
[  138.979487]  ? syscall_enter_from_user_mode+0x1d/0x50
[  138.980365]  do_syscall_64+0x3b/0x90
[  138.980992]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  138.981856] RIP: 0033:0x7f1e530e1b19
[  138.982474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  138.985301] RSP: 002b:00007f1e50657188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  138.986402] RAX: ffffffffffffffda RBX: 00007f1e531f4f60 RCX: 00007f1e530e1b19
[  138.987435] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280
[  138.988487] RBP: 00007f1e5313bf6d R08: 0000000000000000 R09: 0000000000000000
[  138.989534] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  138.990584] R13: 00007ffe3a86fb2f R14: 00007f1e50657300 R15: 0000000000022000
[  138.991638]  </TASK>
[  138.992006] irq event stamp: 1646
[  138.992520] hardirqs last  enabled at (1645): [<ffffffff84400d06>] asm_sysvec_apic_timer_interrupt+0x16/0x20
[  138.993962] hardirqs last disabled at (1646): [<ffffffff84247a45>] __schedule+0x1225/0x2470
[  138.995147] softirqs last  enabled at (1540): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  138.996377] softirqs last disabled at (871): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  138.997603] ---[ end trace 0000000000000000 ]---
[  140.256501] loop4: detected capacity change from 0 to 40
[  142.458495] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht'
19:25:32 executing program 0:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xa8102, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
getgroups(0x5, &(0x7f0000000300)=[r3, r3, r3, <r4=>r3, r3])
lchown(&(0x7f0000000240)='./file1\x00', r2, r4)
lchown(&(0x7f0000000140)='./file0\x00', r2, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

19:25:32 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x200842, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="03000000000000bc2186382458468ed2b83a00666973653000"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

19:25:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0)

19:25:32 executing program 6:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x2)

19:25:32 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xa, 0x16, 0x0, 0x1, [@generic="aca88e14ff81"]}]}, 0x20}], 0x1}, 0x0)

19:25:32 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4)
bind$packet(r0, &(0x7f0000000380), 0x14)

19:25:32 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r2=>r0, 0x0, 0x401, 0xff})
setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x1, 0x4)
r3 = dup(r1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x6c)
socket$packet(0x11, 0x0, 0x300)
dup3(r2, r3, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={<r4=>0x0, @initdev}, &(0x7f0000000140)=0xc)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @remote}, 0x10)
r5 = gettid()
perf_event_open(&(0x7f0000000300)={0x97cb596a7b7326ea, 0x80, 0x1f, 0xa0, 0x20, 0x1e, 0x0, 0x1, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4a00, 0x8ca, 0x5, 0x0, 0x19, 0x4, 0x6, 0x0, 0x2, 0x0, 0x20}, r5, 0xb, r0, 0x8)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0xa00)

19:25:32 executing program 1:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
r3 = socket$inet6(0xa, 0x0, 0x7)
fcntl$notify(r3, 0x402, 0x80000000)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c6465bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d00"/236, 0xec}], 0x1, 0x6, 0x2, 0xf)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r4, r4, 0x0, 0x100000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000013c0)={0x2, [], 0x4, "56325e6891892a"})

[  143.727732] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht'
19:25:32 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4)
bind$packet(r0, &(0x7f0000000380), 0x14)

19:25:32 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast2}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

19:25:32 executing program 6:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
r3 = socket$inet6(0xa, 0x0, 0x7)
fcntl$notify(r3, 0x402, 0x80000000)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c6465bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d00"/236, 0xec}], 0x1, 0x6, 0x2, 0xf)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r4, r4, 0x0, 0x100000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000013c0)={0x2, [], 0x4, "56325e6891892a"})

[  143.896327] audit: type=1400 audit(1663010732.945:9): avc:  denied  { write } for  pid=3987 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
19:25:33 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4)
bind$packet(r0, &(0x7f0000000380), 0x14)

19:25:33 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fadvise64(r0, 0x0, 0x0, 0x5)

19:25:33 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xa, 0x16, 0x0, 0x1, [@generic="aca88e14ff81"]}]}, 0x20}], 0x1}, 0x0)

[  144.060457] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht'
19:25:33 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fadvise64(r0, 0x0, 0x0, 0x5)

19:25:33 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4)
bind$packet(r0, &(0x7f0000000380), 0x14)

[  145.512400] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht'
19:25:34 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r2=>r0, 0x0, 0x401, 0xff})
setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x1, 0x4)
r3 = dup(r1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x6c)
socket$packet(0x11, 0x0, 0x300)
dup3(r2, r3, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={<r4=>0x0, @initdev}, &(0x7f0000000140)=0xc)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @remote}, 0x10)
r5 = gettid()
perf_event_open(&(0x7f0000000300)={0x97cb596a7b7326ea, 0x80, 0x1f, 0xa0, 0x20, 0x1e, 0x0, 0x1, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4a00, 0x8ca, 0x5, 0x0, 0x19, 0x4, 0x6, 0x0, 0x2, 0x0, 0x20}, r5, 0xb, r0, 0x8)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0xa00)

19:25:34 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xa, 0x16, 0x0, 0x1, [@generic="aca88e14ff81"]}]}, 0x20}], 0x1}, 0x0)

19:25:34 executing program 1:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
r3 = socket$inet6(0xa, 0x0, 0x7)
fcntl$notify(r3, 0x402, 0x80000000)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c6465bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d00"/236, 0xec}], 0x1, 0x6, 0x2, 0xf)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r4, r4, 0x0, 0x100000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000013c0)={0x2, [], 0x4, "56325e6891892a"})

19:25:34 executing program 6:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
r3 = socket$inet6(0xa, 0x0, 0x7)
fcntl$notify(r3, 0x402, 0x80000000)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c6465bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d00"/236, 0xec}], 0x1, 0x6, 0x2, 0xf)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r4, r4, 0x0, 0x100000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000013c0)={0x2, [], 0x4, "56325e6891892a"})

19:25:34 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x200842, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="03000000000000bc2186382458468ed2b83a00666973653000"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

19:25:34 executing program 0:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xa8102, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
getgroups(0x5, &(0x7f0000000300)=[r3, r3, r3, <r4=>r3, r3])
lchown(&(0x7f0000000240)='./file1\x00', r2, r4)
lchown(&(0x7f0000000140)='./file0\x00', r2, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

19:25:34 executing program 4:
setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0])
socket$inet_icmp(0x2, 0x2, 0x1)

19:25:34 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fadvise64(r0, 0x0, 0x0, 0x5)

19:25:35 executing program 4:
setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0])
socket$inet_icmp(0x2, 0x2, 0x1)

19:25:35 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fadvise64(r0, 0x0, 0x0, 0x5)

19:25:35 executing program 0:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xa8102, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
getgroups(0x5, &(0x7f0000000300)=[r3, r3, r3, <r4=>r3, r3])
lchown(&(0x7f0000000240)='./file1\x00', r2, r4)
lchown(&(0x7f0000000140)='./file0\x00', r2, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

19:25:35 executing program 1:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
r3 = socket$inet6(0xa, 0x0, 0x7)
fcntl$notify(r3, 0x402, 0x80000000)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c6465bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d00"/236, 0xec}], 0x1, 0x6, 0x2, 0xf)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r4, r4, 0x0, 0x100000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000013c0)={0x2, [], 0x4, "56325e6891892a"})

19:25:35 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r2=>r0, 0x0, 0x401, 0xff})
setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x1, 0x4)
r3 = dup(r1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x6c)
socket$packet(0x11, 0x0, 0x300)
dup3(r2, r3, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={<r4=>0x0, @initdev}, &(0x7f0000000140)=0xc)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @remote}, 0x10)
r5 = gettid()
perf_event_open(&(0x7f0000000300)={0x97cb596a7b7326ea, 0x80, 0x1f, 0xa0, 0x20, 0x1e, 0x0, 0x1, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4a00, 0x8ca, 0x5, 0x0, 0x19, 0x4, 0x6, 0x0, 0x2, 0x0, 0x20}, r5, 0xb, r0, 0x8)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0xa00)

19:25:35 executing program 5:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xa8102, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
getgroups(0x5, &(0x7f0000000300)=[r3, r3, r3, <r4=>r3, r3])
lchown(&(0x7f0000000240)='./file1\x00', r2, r4)
lchown(&(0x7f0000000140)='./file0\x00', r2, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

19:25:35 executing program 6:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
r3 = socket$inet6(0xa, 0x0, 0x7)
fcntl$notify(r3, 0x402, 0x80000000)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c6465bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d00"/236, 0xec}], 0x1, 0x6, 0x2, 0xf)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r4, r4, 0x0, 0x100000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000013c0)={0x2, [], 0x4, "56325e6891892a"})

19:25:35 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x200842, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="03000000000000bc2186382458468ed2b83a00666973653000"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

19:25:35 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000))

19:25:35 executing program 4:
setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0])
socket$inet_icmp(0x2, 0x2, 0x1)

19:25:35 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000))

19:25:35 executing program 4:
setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0])
socket$inet_icmp(0x2, 0x2, 0x1)

19:25:35 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r2=>r0, 0x0, 0x401, 0xff})
setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x1, 0x4)
r3 = dup(r1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x6c)
socket$packet(0x11, 0x0, 0x300)
dup3(r2, r3, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={<r4=>0x0, @initdev}, &(0x7f0000000140)=0xc)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @remote}, 0x10)
r5 = gettid()
perf_event_open(&(0x7f0000000300)={0x97cb596a7b7326ea, 0x80, 0x1f, 0xa0, 0x20, 0x1e, 0x0, 0x1, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4a00, 0x8ca, 0x5, 0x0, 0x19, 0x4, 0x6, 0x0, 0x2, 0x0, 0x20}, r5, 0xb, r0, 0x8)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0xa00)

19:25:35 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000))

19:25:35 executing program 5:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xa8102, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
getgroups(0x5, &(0x7f0000000300)=[r3, r3, r3, <r4=>r3, r3])
lchown(&(0x7f0000000240)='./file1\x00', r2, r4)
lchown(&(0x7f0000000140)='./file0\x00', r2, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

19:25:35 executing program 7:
clock_adjtime(0x0, 0x0)
clock_adjtime(0x4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x54f, 0x0, 0x6, 0x1ff, 0x4, 0x7, 0x7, 0x8001, 0x0, 0xe864, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
clock_adjtime(0x0, 0x0)
clock_adjtime(0x4, 0x0)
clock_adjtime(0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0xe6, 0x7, 0x0, 0x0, 0x0, 0x101})
clock_adjtime(0x2, &(0x7f0000000800)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x5, 0x7ff, 0x7ff, 0x0, 0x1, 0xffffffffffffff00, 0x401, 0x1ff})
clock_adjtime(0x0, 0x0)
clock_adjtime(0x0, 0x0)
clock_adjtime(0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000001200)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
clock_adjtime(0x0, 0x0)

19:25:36 executing program 5:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xa8102, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
getgroups(0x5, &(0x7f0000000300)=[r3, r3, r3, <r4=>r3, r3])
lchown(&(0x7f0000000240)='./file1\x00', r2, r4)
lchown(&(0x7f0000000140)='./file0\x00', r2, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

19:25:36 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000))

19:25:36 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=<r0=>0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB])
write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
getpid()
syncfs(r4)

19:25:36 executing program 0:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xa8102, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
getgroups(0x5, &(0x7f0000000300)=[r3, r3, r3, <r4=>r3, r3])
lchown(&(0x7f0000000240)='./file1\x00', r2, r4)
lchown(&(0x7f0000000140)='./file0\x00', r2, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

19:25:36 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b69, &(0x7f0000000040))

19:25:36 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'xchacha20\x00'}}}]}, 0x138}}, 0x0)

19:25:36 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x2}}, 0x101000)

19:25:36 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{}]})

19:25:36 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2)

19:25:36 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'xchacha20\x00'}}}]}, 0x138}}, 0x0)

19:25:36 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b69, &(0x7f0000000040))

19:25:36 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2)

19:25:36 executing program 3:
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000001c0), 0x3000000)

19:25:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2})

19:25:36 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lremovexattr(0x0, 0x0)

19:25:36 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2)

19:25:36 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'xchacha20\x00'}}}]}, 0x138}}, 0x0)

19:25:36 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'xchacha20\x00'}}}]}, 0x138}}, 0x0)

19:25:36 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2)

19:25:36 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lremovexattr(0x0, 0x0)

19:25:36 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b69, &(0x7f0000000040))

19:25:36 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=<r0=>0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB])
write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
getpid()
syncfs(r4)

19:25:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2})

19:25:36 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r3, &(0x7f0000000400)="c0", 0x1, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0xfffffffe, 0x0, 0x2})

19:25:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

[  147.324186] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
19:25:36 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b69, &(0x7f0000000040))

19:25:36 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lremovexattr(0x0, 0x0)

19:25:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000, 0x0)

19:25:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2})

19:25:36 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r3, &(0x7f0000000400)="c0", 0x1, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0xfffffffe, 0x0, 0x2})

19:25:36 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2, &(0x7f0000000000)={@dev}, 0x14)

19:25:36 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lremovexattr(0x0, 0x0)

19:25:36 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=<r0=>0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB])
write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
getpid()
syncfs(r4)

19:25:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:36 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:36 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:36 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r3, &(0x7f0000000400)="c0", 0x1, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0xfffffffe, 0x0, 0x2})

[  147.589554] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  147.613932] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
19:25:36 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:36 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r3, &(0x7f0000000400)="c0", 0x1, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0xfffffffe, 0x0, 0x2})

19:25:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2})

19:25:36 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:36 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=<r0=>0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB])
write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
getpid()
syncfs(r4)

19:25:36 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:36 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

[  147.989360] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  148.004068] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
19:25:37 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:37 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

[  148.081491] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  148.126707] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  148.131380] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
19:25:37 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:37 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:37 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:37 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

[  148.214414] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[  148.246179] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
19:25:37 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:37 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffff, 0x1, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'})
r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7, 0xa3, 0x0, 0xdf, 0x0, 0xffffffffffffffff, 0x40a04, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000300), 0x6}, 0x40000, 0x30a, 0x3, 0x8, 0x1f, 0x800, 0x7fff, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xd, r1, 0xa)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000040)=<r5=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000000c0)=r5)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001040)={{r3}, r5, 0x18, @unused=[0x7fff, 0x870f, 0x80000000, 0xffffffffffffffff], @name="fb0b4d23e4e70bf23ac808234f688ce2bc000c544d96ff2e8e89c6715c667f19785d26fd52d24222eadad7cc89f9cc61955ff78654d4cc65a37aaeb93f9d4a9847d1f73d6084d69dcf35bdf8512a38056246b38334d487f6c27167d27b88dff2bc7791df718cf0c0cc9b55b63a7d6e14dc966855fe5de28b7f9bc331f90dee26ca24c7d942eff1642248889c2efd320314ffd9eb3c107e6ee036bf3032c078b4defe7b5a6fef9ab0935dfb0a942e4d88274cc1fb482034adee9c403aa26d4748b80f26e93144c6076d02c698b2456c177a342208a6d5b929b29e6b743cee60f17b7aea9a638b9f267d524a0b77a77ed2fd8a1568c8b7b6b5abe7432f8ba52fe53faccc5dec5dece832711bf5cab3fdc28c70ae080cc8e08c02f974e47d19e8a99a51c83e1022e6669d603375688de51b28fbf509dd823f7daf8a3e7dfa9025f77ec29bd2a498f17e7d2d5666b004aafa38f7b88a9ae6352ffd7b25560bb95725ea022ee8c6ea06dad7fe07f1e9c3ce7ceed6c5299039811a682847169a63a03ec4a596f509cbb55f5cfacd60e182d84a6cd5594310d045a0494cc006c6e13edfbdab2dbc86335af1fdae3400d8df1b0b013c330efa14a31062043c74024d502b7c3c7431f65adfcf6f326b813a67a80edc598f30cdcf13b249c3c075e59666701c1a4ad520c87054e487084e400c1077203e8bb907d35b3210e5e7f0da79b07a4294227035c4bf191385fa649dbd3c7aa2f8f4e7748a75aee6b83caf20dc61cf8f7049a2402c2bd2dbcb7e6a3a919fde0a79bda774d134d624277238f84771f6623957916b77e51928aba18b9c190416bdaf96a60a4477a5481894c1d2bff1a506851a9c71a6d870f8059e74bf979b1326f6567b7ec61995649d70635869dd47da15d317fbd35b6cf53ff5d01066c4359ebb2ceacad63158da0bb40cfe2c1b1f1b6312bac8e76e14d507441131ffe7a126712f62910e291d626481af88b8d2d783921ca59aebd46fabb8bb77f271622dc2e591728fd9e55f6a3263658e298e7232a433d220be3336fad15fee7318997a70f50686e69e36508ba4b83a0eb9c0ee759b99fba9a284ef900bef7b1e2801d7c6038f6a906a72aeb553bf9dd1e405f489c9e1252c3b92e2b1ad51eff48df4dc03b178ef77f955de70473fba599a831b59f514203314f8b2296f32e9e0771a6f8177a22049212d90016cda2d30ccff43c38a0c8204f72caa17640e5e74d0827d16b48e26655132db696cea1b8ea7403665ee34669e652cb7f69713d8f13d840642d01fb1993a500bf634bcef61355e43f83a8ed083bb54af8631716411a8275416d4eeada0fd166b90fa5d50cb8824d1a45459f54c98e9011c6a566b735735c1ad48bcadde1c053d98f3ce55db93af26d258da9b3d44394259389345e86673fb478ce844a2655e7c82bad825d0b1f757269db28cba419034ffc0a4911a29c4c22ba9a9940f4cb2e7f4cc80f2c96f537d133b3586c46f3ae2e121d4fa0579f2e24e19f9aff440eddba5712237855afe10f64e8799b7e74e3a66799580c76911a35ae4af1bf38e460997115f0d6290f15c03a4e7d7e5093a4016fcd077ea6d46a23cb771800c79a5126354132f3ad69f11ed5f56ce5291240da6e7d724ad2d864baf2295a938d23c51de68d00c1f6334e63f9a628a297e5479b698bf5909654c1cf28fe09814fa619cc81af24424024e2dda31706053796d0f712f6e1de7679c4ac8fad0d8bb662d4d9f8ccdaed4519e10d7815fb7813a88fb7c8ec3debc9fc94ee2fe42a4716e9d134d0d44917204868f5e5a46b02b117a3483c7cc0924b7531ec855ff439be45ef299806f2d49ed014854484e447fe4bb5e9faf4473632b9c1562a4adc45fa9cea5144487632393ec258782eb1a6d2776e7ad0560954f1ed56e06fdd46d38ee38dadf1eb4a33a8758863ef3df58bd787dd614878d7e356467b860930e774158b7f094d599a15bf062d06b1edc9dbc9e5b57bfb54308bd2fb2a3c3664ecec8a86f9554e6a230be3149df41c443c9bd318566c01052b18339d2b65de1baabac560f55e591c5f02509a80fa6ff11e58f41a57801d6796715a68065e26957d6b28555d77b5b4afcc5289d0138fd616e3de81d24e5b264bfec5857e1e0f632f8f2d1457f2f397d25141ae3c28870cfc55fc61e2344bf72563a99599d634d07e7ad427c0a2ee11797914989f772214b4cdb84e57a5cf0ebe3857fafae9011f62d61852254516e04200613526f6d3d40eb0999eb28dda88a6fc9978e34b16fc68e7fcca4f9a2852b30464775fb0cb88a8eaec823379a84afcfcdfe498330e887efa5705f71a3947a57ee88e17bf4951ad3e77b3a991169d09f1b4ed3b1e965cdd1dda97901c9e1ecc862bb3fa9f14bff06b617e3d60eea666999d0d4a3c3f0df3658043a1c77201eb5417596d55a45b99fb4e7972651b509b05e6cabe4c617801d5e355309cc1405b43db5b86ec43937aa68d693fbbe527ff82a4b734c23cea79a417939fb8cb6be8322213f977b42805b77464afc17ee93878a6036d5516909e4c0c163e63d3604965989c733ced4ad5a601b51ed399dfffffe2d9352f142f906b209d285062a9ec034248f8630efc87767ea809fe2154cc0bfcf62356eb0e1b15aa6ac39352239fc745027ed8ef81ff29ffa0028c06e8e4fe899653d510cfc25720dbbbcb80ab2f9bdce479ecc7e2d07d460ceff21e808dd838b9e4420a259797db5204fdd99ccf43308745a33d57f3af95391260629763be6382a45a6c6b937f5eef1c3f4c38da0f0f2571397a3499dafd6db4fa4049e5319a92ef66968bdfbf86cd72bfbeb5765a1c03c1702a3b53cbbb98d13be0f1cc2e3f0587cd413080053d76be8e161833e29732ab410669765ccc6e0f90cdf6742bdf4d79d7935ee2cb2879c308ddddfb991336fddd5624e9925653964bcb79e193dd9eeaa9c26aa5fe0b6f2cd48849ac4279b2fcb5053b136eed02db8376ae98b198c05707d62e8bb49ad69afd8603a61dba291eaa63d75417778caf1f9a8787495cded8a3b96e0cd341b052f09d80620997290d75f9c58d8aa588818aca4ee37796c7cd7afc2ab8e8cf6b51f6d25080ef1d5fa0c81608d631369ddfef76708968cc23c26cafa63ff079d4c33ab315abd825c3336fe3155680019258c47a4925a9f3a7587fc1e92ee0d0e477fe41e5c8ddcfb24228c833ca4773205e995cc8a73b37471267ccf7492e635bb56f4aad87f7e229a4ac7d41abe1737ad7ad248ca1d0efe17eea5f09def6907e357192a94a9b854ca31e233d5a21349adede6978d3d253d1736f45580accf796f0578c26bdbcef647b3e4d4d1123673b1b120c87dc40f9be8529af7eef2b028ccba6ef6ee0cac582480b3febe600294a9819e6be8c4c11278e254b0223602da5e0828fd3ed1fe5d00bc5ee8f041e886093fcc08d8044e2cc5821a58a30be17cdd8e434b64225c08f3adc7783913780c959734b9e6c8dd530b68bc6211e809bfa2132031637de6b3afcb1eeaec02f908c50da23a814257e8998542fb56c875bbd5dd97f99e5029e6d942062926674fdb0d6968ecfcdf187a3f44c4e5fdb95a9881e38261c0bd7b27cfa5fbfb0a6de6775cc17f6be6bfb7a8684110810c0fac09faa23e5fe8bb0f6512ae91ef8d4dc54556885cb87ead52e64a339a9f2ecd0eeb75a9d93dfc2efd62541ad9a9913b665c8c2d1595854ecc27721cc6ecd424eaa15b9312a306a638394ff9b9315cbab99021d999d539ac0083f69eb6a12b70e79ec4375f7d2579f731ef4e44a24a479c3c3f1bbfc6167caaed079de20948d1f7db5452c366ccffa07df815d6cb8f91dc0f3415f92cd77daf6279700faf3383c0e2bc6ef86f1ac26b6e3eb1a632a48961d3b09bbc98a6f94ad43deb61feb7211efe38cfe6a85a1ab5e8bff9219bd30020fdd48281853117bca6bd8904b2b8b25d05fb7a8e70faedb51286c0a4524910223796784a8bf84c7fb84e999f5efa120b33ab08f3da29681bebdf677266e90d28d2954147d1ba87f585ed0ecd24de9b5b0dc43aa6b8455aa97609d7b6d644a5ff14d50a7563b1afa36f88d0ea4d3c787121b380d7ee14037167713af1e0aaeb5b981c2ddbdcc114a55027f5ea5721c5c29de83b042e7ff100cbb5d8d18c443fba958caaceecbb4ab60f67e4a3c44f19c00b42b7dd2aa2e472f2a0eb71b31c7e44a88c741a412bdb9a89d0920cc5be40b9a8caa30ce83983d6d4e22c6ece1036176a635bdae033dcd4e4519261c868a764bfdbd898fb69a4564b909cd35240a0a8283e04d8beada9477a6bda51c4a7b57dfe8c17cee6a78d20b05385013ec530bff39d30347539d841c07b4323b63b52cfc54bb6aaae08df002f836c838c60f41ad1404e42741c8051b5702262c82e5ec8feb02c3ae521e36ecfc7f338f38b2e7669762c27a3985dd4e8bbcebcb3909e3d81f7576c36212cd7721583ccf5bb22efcde333ecbdadcbacd9a882bbfef057f5563b5a8dc497d07ab7feb8e578a4e70b182544f382dcd1d84bfe4f780059532a2f3e65e8ca1bb8ac0a2a408e3500b6764d38574c62786e0be50f66d746d80720a03c9e1820e86415ea838ac4688077d1db81637945943907cc7299ce9a3ef7d4dba1c2d9ff592b0dc4329535ab1004e3a3db9b9faf7714915de873a51b23377bfc7a026ba5be4e263f8f42a5e15684c5b2138544a56457ef9920623435c186127c61959f4f37a4477f712275c83f9c268060074e50a853b43d1ae56b3aad7ff353a126f79d8fd26910ae92be35c94f5c9d8132b16cfddd892c58cca6f0a6e83371e4059d22904d705ba9602106c3b2d6d4fa42e36583a1e5250bb5e1c707c7569bd6d60d1526c9b68b401ae8a50b192a8a97822c484b8d5568c5ccddc31300f4cf53ccfd39dc8548e122b426bca65967ff3ab4c9997abf2835db148ecaad72d72acd10456166ead57d1f00478232339f3cce187bd9358db43ce06de1e62e4215b9178692f8379505bca5432512d9f88d608670af944a103b75a8d55a85c5d110255bb8c54194e90732495a26c29968e008719543978159d7f7d29b076421102c8f55206e7d283a2bd2c68f31446bd8f076d73c75d32b0c899812d3ebde6fa45c0259f902b8f4fe9e44daee38abdb56a7315779e5a546d64cd4ea005666eb464de8b44f1859f91d8ddcb15a0b6c2165dcd0a2187bd6fad20dec9ecc165c599377218aa4f1ec4483d069928f4142bb229896e9184b2a96777e27aea3e31703d417dab7d2684d2cba5d1d5cfebf68f28a696bfc7a6f9597b16d03afdf68b65ae4db5e57a6ebeac652313db8a80949ed9d3fbb5dbacdf32c12c47effdbfe37da278adb975cdc13aaaf44b3f5c5e586cd395a3afe0b086ec90fe1030b1d447f650328ccc66e3bcb4df71b65b6360b5b3c3c1e487da71a3eb09fcf169821a1fec9b9091ca78ab52bfb96435b81970487dbf2ecaef3ce6503b730079e6b952a6f3c40b49238b03bcffe39d0bb2e487ffce35347379ef8a97acd865c87b7800a5be356522133c31ea3f36d16dc1690e1adeab0f9616ef8f57cb1e8b7ae3fe58fccf234e13e654167b37b41527f0f149556f87f14d829d9f4993ff8c1eb4efec9efc2af7539bde1b6dbfcff882db96cd9ad666071990c693e662ab6e6b5e902ee655125fc4d71999c00e2080c1663d1e52c6930b8d5a13a"})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0xa400, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0)

19:25:37 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40485404, &(0x7f0000000040)={0x1})

19:25:37 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:37 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:37 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000180)='./file0\x00')

19:25:37 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

19:25:37 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000
VM DIAGNOSIS:
19:25:28  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88801f587468 RCX=0000000000000000 RDX=1ffff11003eb0e8f
RSI=ffffffff816c5f9c RDI=ffff88801f587478 RBP=ffff88801f587438 RSP=ffff88801f587380
R8 =ffffffff85eca174 R9 =ffffffff85eca178 R10=ffffed1003eb0e81 R11=ffff88801f5873e0
R12=ffff88801f587468 R13=0000000000000000 R14=ffff888019ab0000 R15=0000000000092cc0
RIP=ffffffff8135b3b2 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcd647218b0 CR3=000000000ee78000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d
YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888020caf3c8
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001
R12=0000000000000038 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30
RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f1e50657700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb71cafc620 CR3=0000000015e5e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 ff00ffffffffffff 0000000000000000
YMM01=0000000000000000 0000000000000000 0100010001000000 ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0500050005000000 455441564952505f
YMM03=0000000000000000 0000000000000000 0000000000000000 000000564952505f
YMM04=0000000000000000 0000000000000000 0003000500050005 0005000000455441
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000