Warning: Permanently added '[localhost]:21939' (ECDSA) to the list of known hosts.
2022/09/28 03:28:09 fuzzer started
2022/09/28 03:28:09 dialing manager at localhost:35827
syzkaller login: [   44.016498] cgroup: Unknown subsys name 'net'
[   44.078486] cgroup: Unknown subsys name 'rlimit'
2022/09/28 03:28:22 syscalls: 2215
2022/09/28 03:28:22 code coverage: enabled
2022/09/28 03:28:22 comparison tracing: enabled
2022/09/28 03:28:22 extra coverage: enabled
2022/09/28 03:28:22 setuid sandbox: enabled
2022/09/28 03:28:22 namespace sandbox: enabled
2022/09/28 03:28:22 Android sandbox: enabled
2022/09/28 03:28:22 fault injection: enabled
2022/09/28 03:28:22 leak checking: enabled
2022/09/28 03:28:22 net packet injection: enabled
2022/09/28 03:28:22 net device setup: enabled
2022/09/28 03:28:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/28 03:28:22 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/28 03:28:22 USB emulation: enabled
2022/09/28 03:28:22 hci packet injection: enabled
2022/09/28 03:28:22 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220927                                          )
2022/09/28 03:28:22 802.15.4 emulation: enabled
2022/09/28 03:28:22 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/28 03:28:22 fetching corpus: 50, signal 24001/27528 (executing program)
2022/09/28 03:28:22 fetching corpus: 100, signal 31919/36986 (executing program)
2022/09/28 03:28:23 fetching corpus: 150, signal 42934/49178 (executing program)
2022/09/28 03:28:23 fetching corpus: 200, signal 52245/59485 (executing program)
2022/09/28 03:28:23 fetching corpus: 250, signal 57462/65851 (executing program)
2022/09/28 03:28:23 fetching corpus: 300, signal 62365/71761 (executing program)
2022/09/28 03:28:23 fetching corpus: 350, signal 64666/75201 (executing program)
2022/09/28 03:28:23 fetching corpus: 400, signal 67354/78933 (executing program)
2022/09/28 03:28:23 fetching corpus: 450, signal 71123/83616 (executing program)
2022/09/28 03:28:23 fetching corpus: 500, signal 75020/88316 (executing program)
2022/09/28 03:28:23 fetching corpus: 550, signal 78553/92576 (executing program)
2022/09/28 03:28:24 fetching corpus: 600, signal 80623/95543 (executing program)
2022/09/28 03:28:24 fetching corpus: 650, signal 85168/100515 (executing program)
2022/09/28 03:28:24 fetching corpus: 700, signal 87151/103242 (executing program)
2022/09/28 03:28:24 fetching corpus: 750, signal 91116/107602 (executing program)
2022/09/28 03:28:24 fetching corpus: 800, signal 94289/111239 (executing program)
2022/09/28 03:28:24 fetching corpus: 850, signal 98056/115203 (executing program)
2022/09/28 03:28:24 fetching corpus: 900, signal 99999/117736 (executing program)
2022/09/28 03:28:24 fetching corpus: 950, signal 101901/120162 (executing program)
2022/09/28 03:28:25 fetching corpus: 1000, signal 103905/122658 (executing program)
2022/09/28 03:28:25 fetching corpus: 1050, signal 104832/124236 (executing program)
2022/09/28 03:28:25 fetching corpus: 1100, signal 105944/126001 (executing program)
2022/09/28 03:28:25 fetching corpus: 1150, signal 108106/128469 (executing program)
2022/09/28 03:28:25 fetching corpus: 1200, signal 109250/130164 (executing program)
2022/09/28 03:28:25 fetching corpus: 1250, signal 111251/132421 (executing program)
2022/09/28 03:28:25 fetching corpus: 1300, signal 112297/134010 (executing program)
2022/09/28 03:28:25 fetching corpus: 1350, signal 113902/135953 (executing program)
2022/09/28 03:28:25 fetching corpus: 1400, signal 115379/137727 (executing program)
2022/09/28 03:28:26 fetching corpus: 1450, signal 117246/139873 (executing program)
2022/09/28 03:28:26 fetching corpus: 1500, signal 119784/142405 (executing program)
2022/09/28 03:28:26 fetching corpus: 1550, signal 121122/144011 (executing program)
2022/09/28 03:28:26 fetching corpus: 1600, signal 121892/145203 (executing program)
2022/09/28 03:28:26 fetching corpus: 1650, signal 122695/146423 (executing program)
2022/09/28 03:28:26 fetching corpus: 1700, signal 124765/148448 (executing program)
2022/09/28 03:28:26 fetching corpus: 1750, signal 126214/149995 (executing program)
2022/09/28 03:28:26 fetching corpus: 1800, signal 127053/151176 (executing program)
2022/09/28 03:28:27 fetching corpus: 1850, signal 127970/152402 (executing program)
2022/09/28 03:28:27 fetching corpus: 1900, signal 130004/154234 (executing program)
2022/09/28 03:28:27 fetching corpus: 1950, signal 131646/155836 (executing program)
2022/09/28 03:28:27 fetching corpus: 2000, signal 132750/157034 (executing program)
2022/09/28 03:28:27 fetching corpus: 2050, signal 133667/158188 (executing program)
2022/09/28 03:28:27 fetching corpus: 2100, signal 134776/159397 (executing program)
2022/09/28 03:28:27 fetching corpus: 2150, signal 135503/160379 (executing program)
2022/09/28 03:28:27 fetching corpus: 2200, signal 136571/161507 (executing program)
2022/09/28 03:28:28 fetching corpus: 2250, signal 137690/162640 (executing program)
2022/09/28 03:28:28 fetching corpus: 2300, signal 138758/163740 (executing program)
2022/09/28 03:28:28 fetching corpus: 2350, signal 139489/164592 (executing program)
2022/09/28 03:28:28 fetching corpus: 2400, signal 140587/165637 (executing program)
2022/09/28 03:28:28 fetching corpus: 2450, signal 142426/167013 (executing program)
2022/09/28 03:28:28 fetching corpus: 2500, signal 144584/168416 (executing program)
2022/09/28 03:28:28 fetching corpus: 2550, signal 145622/169341 (executing program)
2022/09/28 03:28:28 fetching corpus: 2600, signal 146661/170277 (executing program)
2022/09/28 03:28:29 fetching corpus: 2650, signal 147508/171078 (executing program)
2022/09/28 03:28:29 fetching corpus: 2700, signal 149059/172216 (executing program)
2022/09/28 03:28:29 fetching corpus: 2750, signal 151422/173527 (executing program)
2022/09/28 03:28:29 fetching corpus: 2800, signal 152776/174408 (executing program)
2022/09/28 03:28:29 fetching corpus: 2850, signal 153610/175092 (executing program)
2022/09/28 03:28:29 fetching corpus: 2900, signal 154332/175736 (executing program)
2022/09/28 03:28:29 fetching corpus: 2950, signal 155238/176437 (executing program)
2022/09/28 03:28:29 fetching corpus: 3000, signal 155859/177007 (executing program)
2022/09/28 03:28:30 fetching corpus: 3050, signal 156432/177504 (executing program)
2022/09/28 03:28:30 fetching corpus: 3100, signal 157712/178252 (executing program)
2022/09/28 03:28:30 fetching corpus: 3150, signal 158737/178929 (executing program)
2022/09/28 03:28:30 fetching corpus: 3200, signal 159377/179535 (executing program)
2022/09/28 03:28:30 fetching corpus: 3250, signal 161624/180485 (executing program)
2022/09/28 03:28:30 fetching corpus: 3300, signal 162604/181064 (executing program)
2022/09/28 03:28:30 fetching corpus: 3350, signal 163558/181595 (executing program)
2022/09/28 03:28:30 fetching corpus: 3400, signal 164294/182039 (executing program)
2022/09/28 03:28:30 fetching corpus: 3450, signal 164887/182438 (executing program)
2022/09/28 03:28:31 fetching corpus: 3498, signal 166313/183026 (executing program)
2022/09/28 03:28:31 fetching corpus: 3548, signal 167342/183490 (executing program)
2022/09/28 03:28:31 fetching corpus: 3597, signal 168027/183847 (executing program)
2022/09/28 03:28:31 fetching corpus: 3647, signal 168854/184225 (executing program)
2022/09/28 03:28:31 fetching corpus: 3697, signal 169690/184666 (executing program)
2022/09/28 03:28:31 fetching corpus: 3746, signal 170677/185028 (executing program)
2022/09/28 03:28:31 fetching corpus: 3794, signal 171497/185354 (executing program)
2022/09/28 03:28:31 fetching corpus: 3844, signal 172622/185714 (executing program)
2022/09/28 03:28:31 fetching corpus: 3893, signal 173262/185994 (executing program)
2022/09/28 03:28:32 fetching corpus: 3942, signal 174001/186264 (executing program)
2022/09/28 03:28:32 fetching corpus: 3991, signal 175163/186568 (executing program)
2022/09/28 03:28:32 fetching corpus: 4040, signal 175823/186817 (executing program)
2022/09/28 03:28:32 fetching corpus: 4089, signal 176538/187058 (executing program)
2022/09/28 03:28:32 fetching corpus: 4139, signal 176881/187248 (executing program)
2022/09/28 03:28:32 fetching corpus: 4189, signal 177596/187418 (executing program)
2022/09/28 03:28:32 fetching corpus: 4236, signal 178392/187587 (executing program)
2022/09/28 03:28:32 fetching corpus: 4285, signal 178752/187737 (executing program)
2022/09/28 03:28:32 fetching corpus: 4335, signal 179711/187883 (executing program)
2022/09/28 03:28:33 fetching corpus: 4385, signal 180343/187995 (executing program)
2022/09/28 03:28:33 fetching corpus: 4435, signal 181200/188137 (executing program)
2022/09/28 03:28:33 fetching corpus: 4484, signal 181625/188247 (executing program)
2022/09/28 03:28:33 fetching corpus: 4533, signal 182425/188350 (executing program)
2022/09/28 03:28:33 fetching corpus: 4557, signal 182777/188360 (executing program)
2022/09/28 03:28:33 fetching corpus: 4559, signal 182795/188382 (executing program)
2022/09/28 03:28:33 fetching corpus: 4559, signal 182795/188382 (executing program)
2022/09/28 03:28:36 starting 8 fuzzer processes
03:28:36 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
timer_gettime(0x0, 0x0)

03:28:36 executing program 1:
syz_genetlink_get_family_id$nl80211(&(0x7f0000005800), 0xffffffffffffffff)

03:28:36 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x2)
dup3(r0, r1, 0x0)

[   70.122911] audit: type=1400 audit(1664335716.048:6): avc:  denied  { execmem } for  pid=288 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:28:36 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$sock(r0, &(0x7f00000038c0)=[{{&(0x7f00000036c0)=@in={0xa, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x4c804)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0)

03:28:36 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140))

03:28:36 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e1, 0x0)

03:28:36 executing program 7:
rseq(&(0x7f0000000340), 0x20, 0x0, 0x0)

03:28:36 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640))

[   71.359446] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.362981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.364452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.369702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.371529] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   71.373153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.378318] Bluetooth: hci0: HCI_REQ-0x0c1a
[   71.404669] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.407529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.408796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.415812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.417645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.419249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.422878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.425779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.427384] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   71.435627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.436970] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   71.439977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.445668] Bluetooth: hci2: HCI_REQ-0x0c1a
[   71.449651] Bluetooth: hci1: HCI_REQ-0x0c1a
[   71.480587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.483398] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   71.485005] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.486888] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   71.488204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.490329] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   71.495591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.497946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   71.499220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.507977] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   71.509482] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   71.510865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.512220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   71.520448] Bluetooth: hci3: HCI_REQ-0x0c1a
[   71.522179] Bluetooth: hci7: HCI_REQ-0x0c1a
[   71.540307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   71.541324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.553908] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   71.556640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   71.561321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.568329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   71.570757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   71.572415] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   71.575488] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   71.579431] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   71.581053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   71.582331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   71.584714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.587968] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   71.589466] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   71.589660] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   71.592506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.599758] Bluetooth: hci4: HCI_REQ-0x0c1a
[   71.600628] Bluetooth: hci6: HCI_REQ-0x0c1a
[   71.618410] Bluetooth: hci5: HCI_REQ-0x0c1a
[   73.437557] Bluetooth: hci0: command 0x0409 tx timeout
[   73.501198] Bluetooth: hci1: command 0x0409 tx timeout
[   73.502470] Bluetooth: hci2: command 0x0409 tx timeout
[   73.565212] Bluetooth: hci7: command 0x0409 tx timeout
[   73.566226] Bluetooth: hci3: command 0x0409 tx timeout
[   73.630461] Bluetooth: hci6: command 0x0409 tx timeout
[   73.631453] Bluetooth: hci4: command 0x0409 tx timeout
[   73.694282] Bluetooth: hci5: command 0x0409 tx timeout
[   75.486137] Bluetooth: hci0: command 0x041b tx timeout
[   75.550179] Bluetooth: hci2: command 0x041b tx timeout
[   75.550678] Bluetooth: hci1: command 0x041b tx timeout
[   75.614200] Bluetooth: hci3: command 0x041b tx timeout
[   75.614632] Bluetooth: hci7: command 0x041b tx timeout
[   75.678724] Bluetooth: hci4: command 0x041b tx timeout
[   75.679221] Bluetooth: hci6: command 0x041b tx timeout
[   75.742125] Bluetooth: hci5: command 0x041b tx timeout
[   77.533141] Bluetooth: hci0: command 0x040f tx timeout
[   77.597174] Bluetooth: hci1: command 0x040f tx timeout
[   77.597601] Bluetooth: hci2: command 0x040f tx timeout
[   77.662188] Bluetooth: hci7: command 0x040f tx timeout
[   77.662624] Bluetooth: hci3: command 0x040f tx timeout
[   77.726353] Bluetooth: hci6: command 0x040f tx timeout
[   77.726782] Bluetooth: hci4: command 0x040f tx timeout
[   77.789127] Bluetooth: hci5: command 0x040f tx timeout
[   79.581190] Bluetooth: hci0: command 0x0419 tx timeout
[   79.645162] Bluetooth: hci2: command 0x0419 tx timeout
[   79.645918] Bluetooth: hci1: command 0x0419 tx timeout
[   79.709152] Bluetooth: hci3: command 0x0419 tx timeout
[   79.709898] Bluetooth: hci7: command 0x0419 tx timeout
[   79.774420] Bluetooth: hci4: command 0x0419 tx timeout
[   79.775045] Bluetooth: hci6: command 0x0419 tx timeout
[   79.838259] Bluetooth: hci5: command 0x0419 tx timeout
03:29:31 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140))

03:29:31 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140))

03:29:31 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140))

03:29:31 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x22, 0x0, 0x410)

03:29:31 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x22, 0x0, 0x410)

03:29:32 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x22, 0x0, 0x410)

03:29:32 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x22, 0x0, 0x410)

03:29:32 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x8, 0x4)

03:29:35 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
timer_gettime(0x0, 0x0)

03:29:35 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x8, 0x4)

03:29:35 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x211)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff2000/0x1000)=nil)
mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140), 0x5, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=[0x9, 0x619, 0x401], &(0x7f00000000c0)=[0x0], 0x0)

03:29:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept(r0, 0x0, 0x0)

03:29:35 executing program 7:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1)

03:29:35 executing program 6:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
sendmsg$unix(r1, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

03:29:35 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x2)
dup3(r0, r1, 0x0)

03:29:35 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x2)
dup3(r0, r1, 0x0)

03:29:35 executing program 3:
syz_open_dev$ptys(0xc, 0x3, 0x0)

03:29:35 executing program 6:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
sendmsg$unix(r1, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

03:29:35 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x8, 0x4)

03:29:35 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x2)
dup3(r0, r1, 0x0)

03:29:36 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
timer_gettime(0x0, 0x0)

03:29:36 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x211)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff2000/0x1000)=nil)
mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140), 0x5, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=[0x9, 0x619, 0x401], &(0x7f00000000c0)=[0x0], 0x0)

03:29:36 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x2)
dup3(r0, r1, 0x0)

03:29:36 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
sendmsg$unix(r1, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

03:29:36 executing program 6:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
sendmsg$unix(r1, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

03:29:36 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x8, 0x4)

03:29:36 executing program 7:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1)

03:29:36 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x2)
dup3(r0, r1, 0x0)

03:29:36 executing program 4:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1)

03:29:36 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x2)
dup3(r0, r1, 0x0)

03:29:36 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
sendmsg$unix(r1, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

03:29:36 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
timer_gettime(0x0, 0x0)

03:29:37 executing program 6:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
sendmsg$unix(r1, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

03:29:37 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x211)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff2000/0x1000)=nil)
mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140), 0x5, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=[0x9, 0x619, 0x401], &(0x7f00000000c0)=[0x0], 0x0)

03:29:37 executing program 2:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1)

03:29:37 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

03:29:37 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
sendmsg$unix(r1, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

03:29:37 executing program 0:
syz_open_dev$vcsu(&(0x7f0000004e80), 0x0, 0x107240)

03:29:37 executing program 4:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1)

03:29:37 executing program 7:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1)

03:29:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
clone3(&(0x7f0000000340)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000480)=""/16, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x7, {r2}}, 0x58)

[  131.271104] audit: type=1400 audit(1664335777.196:7): avc:  denied  { open } for  pid=4032 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  131.272682] audit: type=1400 audit(1664335777.196:8): avc:  denied  { kernel } for  pid=4032 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  131.285608] ------------[ cut here ]------------
[  131.285628] 
[  131.285630] ======================================================
[  131.285633] WARNING: possible circular locking dependency detected
[  131.285637] 6.0.0-rc7-next-20220927 #1 Not tainted
[  131.285644] ------------------------------------------------------
[  131.285647] syz-executor.3/4036 is trying to acquire lock:
[  131.285653] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  131.285693] 
[  131.285693] but task is already holding lock:
[  131.285696] ffff888008cd2420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  131.285723] 
[  131.285723] which lock already depends on the new lock.
[  131.285723] 
[  131.285726] 
[  131.285726] the existing dependency chain (in reverse order) is:
[  131.285729] 
[  131.285729] -> #3 (&ctx->lock){....}-{2:2}:
[  131.285743]        _raw_spin_lock+0x2a/0x40
[  131.285755]        __perf_event_task_sched_out+0x53b/0x18d0
[  131.285768]        __schedule+0xedd/0x2470
[  131.285783]        schedule+0xda/0x1b0
[  131.285798]        exit_to_user_mode_prepare+0x114/0x1a0
[  131.285810]        syscall_exit_to_user_mode+0x19/0x40
[  131.285824]        do_syscall_64+0x48/0x90
[  131.285834]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  131.285849] 
[  131.285849] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  131.285862]        _raw_spin_lock_nested+0x30/0x40
[  131.285874]        raw_spin_rq_lock_nested+0x1e/0x30
[  131.285887]        task_fork_fair+0x63/0x4d0
[  131.285903]        sched_cgroup_fork+0x3d0/0x540
[  131.285916]        copy_process+0x4183/0x6e20
[  131.285927]        kernel_clone+0xe7/0x890
[  131.285939]        user_mode_thread+0xad/0xf0
[  131.285950]        rest_init+0x24/0x250
[  131.285963]        arch_call_rest_init+0xf/0x14
[  131.285977]        start_kernel+0x4c6/0x4eb
[  131.285988]        secondary_startup_64_no_verify+0xe0/0xeb
[  131.286002] 
[  131.286002] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  131.286015]        _raw_spin_lock_irqsave+0x39/0x60
[  131.286028]        try_to_wake_up+0xab/0x1930
[  131.286040]        up+0x75/0xb0
[  131.286056]        __up_console_sem+0x6e/0x80
[  131.286072]        console_unlock+0x46a/0x590
[  131.286087]        vprintk_emit+0x1bd/0x560
[  131.286103]        vprintk+0x84/0xa0
[  131.286118]        _printk+0xba/0xf1
[  131.286131]        kauditd_hold_skb.cold+0x3f/0x4e
[  131.286141]        kauditd_send_queue+0x233/0x290
[  131.286156]        kauditd_thread+0x5da/0x9a0
[  131.286170]        kthread+0x2ed/0x3a0
[  131.286184]        ret_from_fork+0x22/0x30
[  131.286196] 
[  131.286196] -> #0 ((console_sem).lock){....}-{2:2}:
[  131.286210]        __lock_acquire+0x2a02/0x5e70
[  131.286226]        lock_acquire+0x1a2/0x530
[  131.286242]        _raw_spin_lock_irqsave+0x39/0x60
[  131.286254]        down_trylock+0xe/0x70
[  131.286270]        __down_trylock_console_sem+0x3b/0xd0
[  131.286286]        vprintk_emit+0x16b/0x560
[  131.286302]        vprintk+0x84/0xa0
[  131.286317]        _printk+0xba/0xf1
[  131.286329]        report_bug.cold+0x72/0xab
[  131.286339]        handle_bug+0x3c/0x70
[  131.286348]        exc_invalid_op+0x14/0x50
[  131.286359]        asm_exc_invalid_op+0x16/0x20
[  131.286372]        group_sched_out.part.0+0x2c7/0x460
[  131.286383]        ctx_sched_out+0x8f1/0xc10
[  131.286393]        __perf_event_task_sched_out+0x6d0/0x18d0
[  131.286406]        __schedule+0xedd/0x2470
[  131.286421]        schedule+0xda/0x1b0
[  131.286435]        exit_to_user_mode_prepare+0x114/0x1a0
[  131.286446]        syscall_exit_to_user_mode+0x19/0x40
[  131.286460]        do_syscall_64+0x48/0x90
[  131.286470]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  131.286484] 
[  131.286484] other info that might help us debug this:
[  131.286484] 
[  131.286487] Chain exists of:
[  131.286487]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  131.286487] 
[  131.286501]  Possible unsafe locking scenario:
[  131.286501] 
[  131.286503]        CPU0                    CPU1
[  131.286506]        ----                    ----
[  131.286508]   lock(&ctx->lock);
[  131.286514]                                lock(&rq->__lock);
[  131.286520]                                lock(&ctx->lock);
[  131.286526]   lock((console_sem).lock);
[  131.286532] 
[  131.286532]  *** DEADLOCK ***
[  131.286532] 
[  131.286533] 2 locks held by syz-executor.3/4036:
[  131.286540]  #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  131.286571]  #1: ffff888008cd2420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  131.286599] 
[  131.286599] stack backtrace:
[  131.286602] CPU: 0 PID: 4036 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220927 #1
[  131.286617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  131.286625] Call Trace:
[  131.286628]  <TASK>
[  131.286632]  dump_stack_lvl+0x8b/0xb3
[  131.286644]  check_noncircular+0x263/0x2e0
[  131.286660]  ? format_decode+0x26c/0xb50
[  131.286679]  ? print_circular_bug+0x450/0x450
[  131.286695]  ? enable_ptr_key_workfn+0x20/0x20
[  131.286714]  ? format_decode+0x26c/0xb50
[  131.286732]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  131.286750]  __lock_acquire+0x2a02/0x5e70
[  131.286771]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  131.286794]  lock_acquire+0x1a2/0x530
[  131.286810]  ? down_trylock+0xe/0x70
[  131.286829]  ? lock_release+0x750/0x750
[  131.286849]  ? vprintk+0x84/0xa0
[  131.286867]  _raw_spin_lock_irqsave+0x39/0x60
[  131.286880]  ? down_trylock+0xe/0x70
[  131.286897]  down_trylock+0xe/0x70
[  131.286914]  ? vprintk+0x84/0xa0
[  131.286931]  __down_trylock_console_sem+0x3b/0xd0
[  131.286948]  vprintk_emit+0x16b/0x560
[  131.286967]  vprintk+0x84/0xa0
[  131.286984]  _printk+0xba/0xf1
[  131.286997]  ? record_print_text.cold+0x16/0x16
[  131.287014]  ? report_bug.cold+0x66/0xab
[  131.287026]  ? group_sched_out.part.0+0x2c7/0x460
[  131.287038]  report_bug.cold+0x72/0xab
[  131.287050]  handle_bug+0x3c/0x70
[  131.287061]  exc_invalid_op+0x14/0x50
[  131.287072]  asm_exc_invalid_op+0x16/0x20
[  131.287087] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  131.287101] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  131.287112] RSP: 0018:ffff8880404d7c48 EFLAGS: 00010006
[  131.287121] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  131.287128] RDX: ffff888018555040 RSI: ffffffff815666b7 RDI: 0000000000000005
[  131.287136] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  131.287143] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff888008cd2400
[  131.287151] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002
[  131.287162]  ? group_sched_out.part.0+0x2c7/0x460
[  131.287175]  ? group_sched_out.part.0+0x2c7/0x460
[  131.287189]  ctx_sched_out+0x8f1/0xc10
[  131.287202]  __perf_event_task_sched_out+0x6d0/0x18d0
[  131.287221]  ? lock_is_held_type+0xd7/0x130
[  131.287238]  ? __perf_cgroup_move+0x160/0x160
[  131.287251]  ? set_next_entity+0x304/0x550
[  131.287268]  ? update_curr+0x267/0x740
[  131.287286]  ? lock_is_held_type+0xd7/0x130
[  131.287302]  __schedule+0xedd/0x2470
[  131.287320]  ? io_schedule_timeout+0x150/0x150
[  131.287339]  ? rcu_read_lock_sched_held+0x3e/0x80
[  131.287358]  schedule+0xda/0x1b0
[  131.287375]  exit_to_user_mode_prepare+0x114/0x1a0
[  131.287387]  syscall_exit_to_user_mode+0x19/0x40
[  131.287402]  do_syscall_64+0x48/0x90
[  131.287414]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  131.287428] RIP: 0033:0x7f5be4079b19
[  131.287436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  131.287447] RSP: 002b:00007f5be15ef218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  131.287458] RAX: 0000000000000001 RBX: 00007f5be418cf68 RCX: 00007f5be4079b19
[  131.287465] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5be418cf6c
[  131.287473] RBP: 00007f5be418cf60 R08: 000000000000000e R09: 0000000000000000
[  131.287480] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5be418cf6c
[  131.287487] R13: 00007ffc8f02eaaf R14: 00007f5be15ef300 R15: 0000000000022000
[  131.287500]  </TASK>
[  131.338867] WARNING: CPU: 0 PID: 4036 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  131.339468] Modules linked in:
[  131.339683] CPU: 0 PID: 4036 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220927 #1
[  131.340207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  131.340928] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  131.341289] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  131.342469] RSP: 0018:ffff8880404d7c48 EFLAGS: 00010006
[  131.342817] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  131.343279] RDX: ffff888018555040 RSI: ffffffff815666b7 RDI: 0000000000000005
[  131.343742] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  131.344205] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff888008cd2400
[  131.344671] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002
[  131.345138] FS:  00007f5be15ef700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  131.345679] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  131.346060] CR2: 00007f5be418d018 CR3: 000000001b00c000 CR4: 0000000000350ef0
[  131.346528] Call Trace:
[  131.346703]  <TASK>
[  131.346860]  ctx_sched_out+0x8f1/0xc10
[  131.347123]  __perf_event_task_sched_out+0x6d0/0x18d0
[  131.347469]  ? lock_is_held_type+0xd7/0x130
[  131.347759]  ? __perf_cgroup_move+0x160/0x160
[  131.348058]  ? set_next_entity+0x304/0x550
[  131.348345]  ? update_curr+0x267/0x740
[  131.348614]  ? lock_is_held_type+0xd7/0x130
[  131.348907]  __schedule+0xedd/0x2470
[  131.349165]  ? io_schedule_timeout+0x150/0x150
[  131.349482]  ? rcu_read_lock_sched_held+0x3e/0x80
[  131.349811]  schedule+0xda/0x1b0
[  131.350050]  exit_to_user_mode_prepare+0x114/0x1a0
[  131.350379]  syscall_exit_to_user_mode+0x19/0x40
[  131.350703]  do_syscall_64+0x48/0x90
[  131.350956]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  131.351298] RIP: 0033:0x7f5be4079b19
[  131.351547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  131.352718] RSP: 002b:00007f5be15ef218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  131.353212] RAX: 0000000000000001 RBX: 00007f5be418cf68 RCX: 00007f5be4079b19
[  131.353694] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5be418cf6c
[  131.354159] RBP: 00007f5be418cf60 R08: 000000000000000e R09: 0000000000000000
[  131.354623] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5be418cf6c
[  131.355088] R13: 00007ffc8f02eaaf R14: 00007f5be15ef300 R15: 0000000000022000
[  131.355557]  </TASK>
[  131.355716] irq event stamp: 778
[  131.355939] hardirqs last  enabled at (777): [<ffffffff8133ec59>] exit_to_user_mode_prepare+0x109/0x1a0
[  131.356546] hardirqs last disabled at (778): [<ffffffff842598f5>] __schedule+0x1225/0x2470
[  131.357086] softirqs last  enabled at (572): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  131.357654] softirqs last disabled at (547): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  131.358209] ---[ end trace 0000000000000000 ]---
03:29:37 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2)

03:29:37 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

03:29:37 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
write$binfmt_aout(r1, 0x0, 0x820)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000340)={0x0, 0x6a1})

03:29:37 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2)

03:29:37 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x211)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff2000/0x1000)=nil)
mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140), 0x5, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=[0x9, 0x619, 0x401], &(0x7f00000000c0)=[0x0], 0x0)

03:29:37 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2)

03:29:37 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

03:29:37 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0x2)

03:29:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
clone3(&(0x7f0000000340)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000480)=""/16, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x7, {r2}}, 0x58)

03:29:38 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

03:29:38 executing program 6:
r0 = msgget(0x0, 0x220)
msgctl$IPC_RMID(r0, 0x0)

03:29:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00'})

[  132.206091] hrtimer: interrupt took 18555 ns
03:29:38 executing program 7:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1)

03:29:38 executing program 0:
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x62b0, &(0x7f0000000480)={0x0, 0x0, 0x33}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540))

03:29:38 executing program 2:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1)

03:29:38 executing program 4:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1)

03:29:38 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
clone3(&(0x7f0000000340)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000480)=""/16, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x7, {r2}}, 0x58)

03:29:38 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
clone3(&(0x7f0000000340)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000480)=""/16, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x7, {r2}}, 0x58)

03:29:38 executing program 0:
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x62b0, &(0x7f0000000480)={0x0, 0x0, 0x33}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540))

03:29:38 executing program 0:
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x62b0, &(0x7f0000000480)={0x0, 0x0, 0x33}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540))

03:29:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
clone3(&(0x7f0000000340)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000480)=""/16, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x7, {r2}}, 0x58)

03:29:38 executing program 0:
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x62b0, &(0x7f0000000480)={0x0, 0x0, 0x33}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540))

03:29:38 executing program 5:
r0 = syz_io_uring_setup(0x677c, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PROBE(r0, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000545cb90"], 0x0)

03:29:38 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40800, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x16000, 0x0)
ioctl$CDROMCLOSETRAY(r1, 0x5319)
getpriority(0x0, 0x0)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$CDROMRESUME(r2, 0x5302)
ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000200)={0x8, 0xad, 0x40, 0x4, 0x8, 0xec})
getuid()
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f0000000cc0)={0x0, 0x1, 0x9, 0x9, 0x7})
ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)

03:29:38 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
clone3(&(0x7f0000000340)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000480)=""/16, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x7, {r2}}, 0x58)

03:29:38 executing program 5:
r0 = syz_io_uring_setup(0x677c, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PROBE(r0, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000545cb90"], 0x0)

[  132.713952] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
03:29:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
clone3(&(0x7f0000000340)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000480)=""/16, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x7, {r2}}, 0x58)

03:29:38 executing program 5:
r0 = syz_io_uring_setup(0x677c, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PROBE(r0, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000545cb90"], 0x0)

03:29:39 executing program 2:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1)

03:29:39 executing program 3:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000580))

03:29:39 executing program 5:
r0 = syz_io_uring_setup(0x677c, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PROBE(r0, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000545cb90"], 0x0)

03:29:39 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40800, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x16000, 0x0)
ioctl$CDROMCLOSETRAY(r1, 0x5319)
getpriority(0x0, 0x0)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$CDROMRESUME(r2, 0x5302)
ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000200)={0x8, 0xad, 0x40, 0x4, 0x8, 0xec})
getuid()
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f0000000cc0)={0x0, 0x1, 0x9, 0x9, 0x7})
ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)

03:29:39 executing program 5:
syz_open_procfs$namespace(0x0, 0x0)

03:29:39 executing program 3:
io_setup(0x6, &(0x7f0000000040)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8})
io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

03:29:39 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
clone3(&(0x7f0000000340)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000480)=""/16, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x7, {r2}}, 0x58)

03:29:39 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
clone3(&(0x7f0000000340)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000480)=""/16, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x7, {r2}}, 0x58)

03:29:39 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0))

[  134.088860] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
03:29:39 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
ftruncate(r0, 0x0)

03:29:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)

03:29:40 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2288, &(0x7f0000000000))

03:29:40 executing program 5:
msgrcv(0x0, 0x0, 0xff0f000000000000, 0x0, 0x0)

03:29:40 executing program 4:
clone3(&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0], 0x1}, 0x58)

03:29:40 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0)

03:29:40 executing program 5:
syz_mount_image$nfs(&(0x7f0000000440), 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000016c0))
socket$inet6_tcp(0xa, 0x1, 0x0)

03:29:40 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40800, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x16000, 0x0)
ioctl$CDROMCLOSETRAY(r1, 0x5319)
getpriority(0x0, 0x0)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$CDROMRESUME(r2, 0x5302)
ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000200)={0x8, 0xad, 0x40, 0x4, 0x8, 0xec})
getuid()
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f0000000cc0)={0x0, 0x1, 0x9, 0x9, 0x7})
ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)

03:29:40 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
clone3(&(0x7f0000000340)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000480)=""/16, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x7, {r2}}, 0x58)

03:29:40 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
ftruncate(r0, 0x0)

03:29:40 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)

03:29:40 executing program 3:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/96)

03:29:40 executing program 7:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000900)='dns_resolver\x00', &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)='\x00', 0x0)

[  134.330668] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
03:29:40 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
ftruncate(r0, 0x0)

03:29:40 executing program 7:
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x213f, &(0x7f0000000c40)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000cc0), &(0x7f0000000d00))

03:29:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0)

03:29:40 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,cache=none,debug=0x'])
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@access_user}], [{@smackfsdef={'smackfsdef', 0x3d, '\xd9oH\x8e\xd9\x13\x1e\xc4#\xa1!\xe7\xb8\xee\xa1\xc4^\xb93\x8bo\x9f\xec\xf4\t\x0f\xee\xbb\xc4+\xe8f:\xa2#\x14\xa1\xac\xa9\xab\xd12m\xbe\x18;\xde\x94\\\xc8\xefkk\xd8\xcfz\xea\xfb\xcdM\x83V\xd6lDH\xd5\x8f\xeb3\xff\xcaQ\x123\x1d\x05u\\\xf10K\x13\x80j\v\x11\xa9SEzA@\xffT\xa4|\xa7\x90\xa8\x15\xaf.=\xdeU\x90>\xebh\xa4\xd0_o\xa2\x8e\x7f\xee\xb9`\xaeN\x8fs\xa5\xc9\xbc\xa6W?\xf1e\xb8\xb3\xcf\x96\xfd\x01\xfd\xc0\x02\xfd\xd5\xcd4\x12\xcc\x9f+\xc9\xb6p\xdal\x03G\xddA\x80\x1d\x83\x89Wx\xa7\a$\xa3\xa7\xde\x91\x8e\xd2\xa6>0\xd9\x1e\xcc\r\xa0\x1d\xdd\xcfp\xb1\xe1\'\xde\x13\xd3\xba\x9eor\xafr\xd0\x7fW\x84~l4\xa0,'}}]}})

03:29:40 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40800, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x16000, 0x0)
ioctl$CDROMCLOSETRAY(r1, 0x5319)
getpriority(0x0, 0x0)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$CDROMRESUME(r2, 0x5302)
ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000200)={0x8, 0xad, 0x40, 0x4, 0x8, 0xec})
getuid()
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f0000000cc0)={0x0, 0x1, 0x9, 0x9, 0x7})
ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)

03:29:40 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000002680)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)

03:29:40 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
ftruncate(r0, 0x0)

03:29:40 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000600))

[  134.465680] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  134.517639] 9pnet_fd: Insufficient options for proto=fd
[  134.543685] 9pnet_fd: Insufficient options for proto=fd
03:29:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000004740)={0x0, 0xea60}, 0x10)

03:29:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:40 executing program 5:
removexattr(0x0, 0x0)

03:29:40 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
io_getevents(r0, 0x0, 0x0, 0x0, 0x0)

03:29:40 executing program 0:
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x26, &(0x7f0000000040)={@remote, @broadcast, @val={@val={0x8100}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "07154e2045770ac3"}}}}, 0x0)

03:29:40 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,cache=none,debug=0x'])
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@access_user}], [{@smackfsdef={'smackfsdef', 0x3d, '\xd9oH\x8e\xd9\x13\x1e\xc4#\xa1!\xe7\xb8\xee\xa1\xc4^\xb93\x8bo\x9f\xec\xf4\t\x0f\xee\xbb\xc4+\xe8f:\xa2#\x14\xa1\xac\xa9\xab\xd12m\xbe\x18;\xde\x94\\\xc8\xefkk\xd8\xcfz\xea\xfb\xcdM\x83V\xd6lDH\xd5\x8f\xeb3\xff\xcaQ\x123\x1d\x05u\\\xf10K\x13\x80j\v\x11\xa9SEzA@\xffT\xa4|\xa7\x90\xa8\x15\xaf.=\xdeU\x90>\xebh\xa4\xd0_o\xa2\x8e\x7f\xee\xb9`\xaeN\x8fs\xa5\xc9\xbc\xa6W?\xf1e\xb8\xb3\xcf\x96\xfd\x01\xfd\xc0\x02\xfd\xd5\xcd4\x12\xcc\x9f+\xc9\xb6p\xdal\x03G\xddA\x80\x1d\x83\x89Wx\xa7\a$\xa3\xa7\xde\x91\x8e\xd2\xa6>0\xd9\x1e\xcc\r\xa0\x1d\xdd\xcfp\xb1\xe1\'\xde\x13\xd3\xba\x9eor\xafr\xd0\x7fW\x84~l4\xa0,'}}]}})

03:29:40 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000600))

03:29:40 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,cache=none,debug=0x'])
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@access_user}], [{@smackfsdef={'smackfsdef', 0x3d, '\xd9oH\x8e\xd9\x13\x1e\xc4#\xa1!\xe7\xb8\xee\xa1\xc4^\xb93\x8bo\x9f\xec\xf4\t\x0f\xee\xbb\xc4+\xe8f:\xa2#\x14\xa1\xac\xa9\xab\xd12m\xbe\x18;\xde\x94\\\xc8\xefkk\xd8\xcfz\xea\xfb\xcdM\x83V\xd6lDH\xd5\x8f\xeb3\xff\xcaQ\x123\x1d\x05u\\\xf10K\x13\x80j\v\x11\xa9SEzA@\xffT\xa4|\xa7\x90\xa8\x15\xaf.=\xdeU\x90>\xebh\xa4\xd0_o\xa2\x8e\x7f\xee\xb9`\xaeN\x8fs\xa5\xc9\xbc\xa6W?\xf1e\xb8\xb3\xcf\x96\xfd\x01\xfd\xc0\x02\xfd\xd5\xcd4\x12\xcc\x9f+\xc9\xb6p\xdal\x03G\xddA\x80\x1d\x83\x89Wx\xa7\a$\xa3\xa7\xde\x91\x8e\xd2\xa6>0\xd9\x1e\xcc\r\xa0\x1d\xdd\xcfp\xb1\xe1\'\xde\x13\xd3\xba\x9eor\xafr\xd0\x7fW\x84~l4\xa0,'}}]}})

03:29:40 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000600))

[  134.642857] 9pnet_fd: Insufficient options for proto=fd
03:29:40 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,cache=none,debug=0x'])
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@access_user}], [{@smackfsdef={'smackfsdef', 0x3d, '\xd9oH\x8e\xd9\x13\x1e\xc4#\xa1!\xe7\xb8\xee\xa1\xc4^\xb93\x8bo\x9f\xec\xf4\t\x0f\xee\xbb\xc4+\xe8f:\xa2#\x14\xa1\xac\xa9\xab\xd12m\xbe\x18;\xde\x94\\\xc8\xefkk\xd8\xcfz\xea\xfb\xcdM\x83V\xd6lDH\xd5\x8f\xeb3\xff\xcaQ\x123\x1d\x05u\\\xf10K\x13\x80j\v\x11\xa9SEzA@\xffT\xa4|\xa7\x90\xa8\x15\xaf.=\xdeU\x90>\xebh\xa4\xd0_o\xa2\x8e\x7f\xee\xb9`\xaeN\x8fs\xa5\xc9\xbc\xa6W?\xf1e\xb8\xb3\xcf\x96\xfd\x01\xfd\xc0\x02\xfd\xd5\xcd4\x12\xcc\x9f+\xc9\xb6p\xdal\x03G\xddA\x80\x1d\x83\x89Wx\xa7\a$\xa3\xa7\xde\x91\x8e\xd2\xa6>0\xd9\x1e\xcc\r\xa0\x1d\xdd\xcfp\xb1\xe1\'\xde\x13\xd3\xba\x9eor\xafr\xd0\x7fW\x84~l4\xa0,'}}]}})

03:29:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@multicast1, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)

[  134.707640] 9pnet_fd: Insufficient options for proto=fd
03:29:40 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,cache=none,debug=0x'])
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@access_user}], [{@smackfsdef={'smackfsdef', 0x3d, '\xd9oH\x8e\xd9\x13\x1e\xc4#\xa1!\xe7\xb8\xee\xa1\xc4^\xb93\x8bo\x9f\xec\xf4\t\x0f\xee\xbb\xc4+\xe8f:\xa2#\x14\xa1\xac\xa9\xab\xd12m\xbe\x18;\xde\x94\\\xc8\xefkk\xd8\xcfz\xea\xfb\xcdM\x83V\xd6lDH\xd5\x8f\xeb3\xff\xcaQ\x123\x1d\x05u\\\xf10K\x13\x80j\v\x11\xa9SEzA@\xffT\xa4|\xa7\x90\xa8\x15\xaf.=\xdeU\x90>\xebh\xa4\xd0_o\xa2\x8e\x7f\xee\xb9`\xaeN\x8fs\xa5\xc9\xbc\xa6W?\xf1e\xb8\xb3\xcf\x96\xfd\x01\xfd\xc0\x02\xfd\xd5\xcd4\x12\xcc\x9f+\xc9\xb6p\xdal\x03G\xddA\x80\x1d\x83\x89Wx\xa7\a$\xa3\xa7\xde\x91\x8e\xd2\xa6>0\xd9\x1e\xcc\r\xa0\x1d\xdd\xcfp\xb1\xe1\'\xde\x13\xd3\xba\x9eor\xafr\xd0\x7fW\x84~l4\xa0,'}}]}})

03:29:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@multicast1, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)

03:29:40 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,cache=none,debug=0x'])
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@access_user}], [{@smackfsdef={'smackfsdef', 0x3d, '\xd9oH\x8e\xd9\x13\x1e\xc4#\xa1!\xe7\xb8\xee\xa1\xc4^\xb93\x8bo\x9f\xec\xf4\t\x0f\xee\xbb\xc4+\xe8f:\xa2#\x14\xa1\xac\xa9\xab\xd12m\xbe\x18;\xde\x94\\\xc8\xefkk\xd8\xcfz\xea\xfb\xcdM\x83V\xd6lDH\xd5\x8f\xeb3\xff\xcaQ\x123\x1d\x05u\\\xf10K\x13\x80j\v\x11\xa9SEzA@\xffT\xa4|\xa7\x90\xa8\x15\xaf.=\xdeU\x90>\xebh\xa4\xd0_o\xa2\x8e\x7f\xee\xb9`\xaeN\x8fs\xa5\xc9\xbc\xa6W?\xf1e\xb8\xb3\xcf\x96\xfd\x01\xfd\xc0\x02\xfd\xd5\xcd4\x12\xcc\x9f+\xc9\xb6p\xdal\x03G\xddA\x80\x1d\x83\x89Wx\xa7\a$\xa3\xa7\xde\x91\x8e\xd2\xa6>0\xd9\x1e\xcc\r\xa0\x1d\xdd\xcfp\xb1\xe1\'\xde\x13\xd3\xba\x9eor\xafr\xd0\x7fW\x84~l4\xa0,'}}]}})

03:29:40 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, 0xfffffffffffffffd)

03:29:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:40 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000600))

03:29:40 executing program 5:
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000500)=""/95, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x0)

03:29:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000004740)={0x0, 0xea60}, 0x10)

[  134.818667] 9pnet_fd: Insufficient options for proto=fd
03:29:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000004740)={0x0, 0xea60}, 0x10)

[  134.835147] 9pnet_fd: Insufficient options for proto=fd
03:29:40 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:40 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,cache=none,debug=0x'])
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@access_user}], [{@smackfsdef={'smackfsdef', 0x3d, '\xd9oH\x8e\xd9\x13\x1e\xc4#\xa1!\xe7\xb8\xee\xa1\xc4^\xb93\x8bo\x9f\xec\xf4\t\x0f\xee\xbb\xc4+\xe8f:\xa2#\x14\xa1\xac\xa9\xab\xd12m\xbe\x18;\xde\x94\\\xc8\xefkk\xd8\xcfz\xea\xfb\xcdM\x83V\xd6lDH\xd5\x8f\xeb3\xff\xcaQ\x123\x1d\x05u\\\xf10K\x13\x80j\v\x11\xa9SEzA@\xffT\xa4|\xa7\x90\xa8\x15\xaf.=\xdeU\x90>\xebh\xa4\xd0_o\xa2\x8e\x7f\xee\xb9`\xaeN\x8fs\xa5\xc9\xbc\xa6W?\xf1e\xb8\xb3\xcf\x96\xfd\x01\xfd\xc0\x02\xfd\xd5\xcd4\x12\xcc\x9f+\xc9\xb6p\xdal\x03G\xddA\x80\x1d\x83\x89Wx\xa7\a$\xa3\xa7\xde\x91\x8e\xd2\xa6>0\xd9\x1e\xcc\r\xa0\x1d\xdd\xcfp\xb1\xe1\'\xde\x13\xd3\xba\x9eor\xafr\xd0\x7fW\x84~l4\xa0,'}}]}})

03:29:40 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[  134.953579] 9pnet_fd: Insufficient options for proto=fd
03:29:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@multicast1, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)

03:29:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000004740)={0x0, 0xea60}, 0x10)

03:29:41 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@multicast1, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)

03:29:41 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$nl_netfilter(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000080)={0x7f8, 0x0, 0x9, 0x401, 0x0, 0x0, {}, [@nested={0x14d, 0x0, 0x0, 0x1, [@generic="37bedc750af87ac5d87cca0a6b547e3a0510751a50d732e64811303a94c2e747173f4e3fa44fa60268396feca40856837924485a9a937c5110202ec7ddb4b034375ccfbf3b107303e574071888487a1e970e19a96502a944627236f82cb95263eeafa7e8ad624cf75be5a1f9bb98116a290bb6b837f81128e254b5689e6ca2337e2541dca2d3527c17a49a5335e0859472d29c5e990f9baeda3eceb808a115ad17037e80cc90e7f59da736308f795dbad8627384c30bb25b2aa6a81745362a0d49a59541b34351ea0a709575a8826f2135300ca377858cc9d1ed6f9d5e158e5363f1699de82810abb8447ae6c9889e9882665974bb3f48af597f8e", @generic="71b94f468e4401da4aecd361b53f504aa45ad6814d51e3f1c7ff6fc19486b0709ccd11778a89f944899587f864feb9ed7f806b3140b2b9ced6d8", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x691, 0x0, 0x0, 0x1, [@generic="1469325ff781b5dadb9b5a1608dcbced369dd5b1774acfe08264886f49f852fb3bf2f1e9fd04e732acb1f60ceba21726873034472b33f235663187eee3e143e3793d81ea16d37f1f", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @generic="3e9119844f275a0d3ae77effcb908f3e752d56814935e3c81154a2358ee74fbb0141dbbefcd54214e8b815c6cbb69580d290b1514aef2ee9c0071f62736e6a33dd3bb6c31936728defd9d6ee2ed837f31083406383ac9d6054f106336ddb0f1944d849f607bc7f4c236a8afc07f7f0677ff3dab9d95b4217fb119b651c75aeb1c6e3d4aebe088a151d87898ce88487ff59", @generic="3f94a3d7d8fafd5a43397346f6eb3e24cdddf6794ffef5463e98f5291b3faabc0a45f65c2341de08fac4f428dcfe1beb9b09732903d0a59a313b43026ced0780ee878c2e9fb97cc149ca004e0f9689972844b51972693a3d7ac12fc703040bc4a22b0a51d5230e1501dd3eee93fdb662126437c4e4cfc015dac344bf6ee1646b0166cbf5616fc704943e622c9d0e3df12f2474b18119f5b8e3a5eacd3cced1c2b4997c784477317280a3180805969c63ad7496d700063e496fbd13ff74917e07ae24a70702985b460f64", @generic="8709cc2d55990dfeb2079587d1cd79b72d005aa2c000fa32ecf329958a5d49db3a33226832dbd1ba614c0d1f6cbb3cf5c7be1e9a926a40556dd22ee6bf05d5513ca7c7c9ae55385e886a9a2754b0fed0ef30c8b955d55b7709eb74c7aaca36dcd40d809586763840113a64f5c46cf9ff0b4d75b146d0093fd2bdf2635420ef09bb67c3a7fc551bd77bc2b1241aa69cb6007d1e7c7059", @generic="60bcf3549dca221a0de8819062a826879a59e4e260a2770246afb50d9f2ab5cdccc4fd0d70f6b67bcc068328eefc29a89afaf6caa594b38bf21e34139db1326b30c83803c14177b579a1e86475e4ef470fe5a5b87edec656801e47bcf0c72a73ad8368ed4f52908d16ce2e0831e1ee819827d79fa27d71ec085202101eab61a0e8957cd68dceba92ecfd2fe4d4e9b248b2bedf2a0b2fda8d8c7d12971c9cd8d9c3bf7b899f9978ab8bd8550d1f5a192b5b00061db2155991a02b73670faa2964bcd876376ef5d619e6388438a1f8c50105", @typed={0x10, 0x0, 0x0, 0x0, @str='\'-{/\xd3{*\\.\xa5\xa7\x00'}, @generic="eb98609d87", @generic="fb73e9a81c41189f55e87eb909ccd7182d77ed85e9048f951ed90a3ca193eee2b82837a3fb5b68fe00410fdce3bdfbbb8e10568db5a66ae3c5f718b42a3d231a63e92d101a6da8aa8a67cbc446827a1cccf2b64b08fd5d11c3e4a711db7db992827f80d496ea898747acacbd34f5f91735fafd9350b6862c6539cb3f8caedd387776c19fc55658cb3a66a3c99c8c54a097ac5d1961e3bb3361f83310c577f139f2a86e1ca21722337d8f89132af7b339fcfc1521f275716b640e61489d625ecd810d740d5c30f943aa43b02522d77489f88532d3e5b82b9a7dc802ed845cd9f619b8a957d396ea96c395e06bf99bf2559de87cb15a62f745647bc0a5b64dd04f56ad8331b6816ffd599b96318db8bcde9fd1ce61b107b6e0491f1f5a8e174d6c9ea4b02e96246885598ad20a48ee089f2988317775b84dcb53203018984b80a3b7e32c2d0977578ffe6b93cfb5a85b9f8abc0879e17b299bff2831eddf546bfbad2f9bdcd3a25741f323871e14222c6ea021a936a263ae8794b8a2633900fb7d4023f6263bebb17df60ace7fca7ecd124c1427f40af51f90cefba81b7f162d3c050c904c6171c960ebe0d6fa66469538f5e26f98904f9a8a20cce21aa140c5e1412ede04a38a9d480b078cd235a6b560dda0b8d5ae44c6751a37116bb70ed4a46ecd6fe41b97760ac588f8dc7b11daeb8e3654823197566620622e581784734763bd4296dcb662fd6317911937567843b66557ad96725ae535c7916c4a73f0411641ca9363b7fa22985b6949111cfe2a453c16f90a0e7b4229cfbcafdd02fa86db8576c140d45ec4b5a799d6211ef2d8ee8b114302df7d42275f081bc3daf35712746524bbfa1a7f847de13bbab66c99739ab484e06338751bfe6029b20304e496d7c4a4910a62afc8a494862035bc8a8d96b1accda6cf76740fbff9bced9830fc79254262b39fa9f899c0ef9df932fa2fbb58984abe828c4593f2b1781fd917b776b7058319d7e237cd8a160f9b57fbdc3fc12ebb29b60382d746188113de2cd79f3f7d2c070f00dcbe01aef80caf6b50cbe6d0c8d7cad803f998be536c4acd93fc52f69953cad3f5a9765850cabe6f4478df340c4e22c70cc45f2e7c9624fa502a72b4dd8fb60428e5edb344bffce9c64915af4c8e5278ea9a49eea5eb1318e2ee93ea90f4a53ed7093ab64ad058986e5837d0233719c23f75"]}]}, 0x7f8}}, 0x0)

03:29:41 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 3:
rseq(0x0, 0x0, 0x1, 0x0)

03:29:41 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 7:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x68240, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x7498, &(0x7f0000000200), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000280), 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000380))
syz_io_uring_setup(0x3f82, &(0x7f0000000600), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x4062, &(0x7f0000000700), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000780), 0x0)

03:29:41 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 3:
rseq(0x0, 0x0, 0x1, 0x0)

03:29:41 executing program 0:
syz_mount_image$vfat(&(0x7f00000044c0), &(0x7f0000004500)='./file0\x00', 0x0, 0x0, &(0x7f0000005840), 0x0, &(0x7f00000058c0))

03:29:41 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:29:41 executing program 5:
r0 = epoll_create1(0x0)
fcntl$setownex(r0, 0xf, 0x0)

03:29:41 executing program 7:
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0)

03:29:41 executing program 4:
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000), 0x4)
socket(0x0, 0x0, 0xa7b1)
fork()

03:29:41 executing program 1:
io_setup(0x10001, &(0x7f0000000000))

[  135.930114] FAT-fs (loop0): bogus number of reserved sectors
[  135.930879] FAT-fs (loop0): Can't find a valid FAT filesystem
03:29:41 executing program 5:
getresgid(&(0x7f00000001c0), 0x0, 0x0)
fork()

03:29:41 executing program 7:
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0)

03:29:41 executing program 3:
rseq(0x0, 0x0, 0x1, 0x0)

03:29:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local}, 0xa, @in=@broadcast, 0x0, 0x1}}, 0xe8)

[  135.994119] FAT-fs (loop0): bogus number of reserved sectors
[  135.994895] FAT-fs (loop0): Can't find a valid FAT filesystem
03:29:41 executing program 4:
close(0xffffffffffffffff)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)

03:29:41 executing program 7:
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0)

[  136.067925] process 'syz-executor.4' launched './file1' with NULL argv: empty string added
03:29:41 executing program 5:
syz_io_uring_setup(0x5251, &(0x7f0000001740), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000017c0), &(0x7f0000001800))

03:29:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0)

03:29:42 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000340), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000380)={0x0, 0x0, {0x0, 0x0, 0x0, 0x12, 0x0, 0x7fff}})

03:29:42 executing program 7:
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0)

03:29:42 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300100001500040028bd7000fcdbdf252b083d000100a45ae428936b6a4b1162cfed7ad73ce5ff1fd9835f01c4216ba72de85642df2d031dbc586692b80da0d695b7bbd5c4c8d0328a0c7fd0bfc37a0000003800010024f73f3912cab6c6c6372f527412174e5fa68fcb7ab51a7be90dcf202e775e73bd43ca8c09273a81bd853449efd85556ef776903a1000100d79ab5a4bf43fedcca3971ce1dcc6cc5acc0488e1a45e38f2ec8ab3d5483a97f270b929a207edf05b226fefb3203a4354c4e041ccda50f4d485bcabdb3e218bd3ffe7ae3535d1eebcbc41cd329b13ebd56a6ae6b0323cdf2acdbed5128c6f3e8d081b46cb344d96a07cf42d378ac67949e8ae1c2f908c886711083e12b4b7281c6b01e9425199330d0c0a4edc034a68687a1fd30a230dd7501538a83b0000000000067f3238979cb4c52a3f86cd7b866300ba3eed81383dcbef2b47da17a0dee570179ae0b7f82847989c6b6e2d20cb3ae755cee324faaac46a818"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x60, 0x9)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

03:29:42 executing program 5:
syz_io_uring_setup(0x5251, &(0x7f0000001740), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000017c0), &(0x7f0000001800))

03:29:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local}, 0xa, @in=@broadcast, 0x0, 0x1}}, 0xe8)

03:29:42 executing program 3:
rseq(0x0, 0x0, 0x1, 0x0)

03:29:42 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[  136.175815] loop6: detected capacity change from 0 to 40
03:29:42 executing program 4:
r0 = add_key$keyring(&(0x7f0000000b80), &(0x7f0000000bc0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$unlink(0x9, 0x0, r0)

[  136.392698] random: crng reseeded on system resumption
[  136.394008] Restarting kernel threads ... done.
03:29:42 executing program 5:
syz_io_uring_setup(0x5251, &(0x7f0000001740), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000017c0), &(0x7f0000001800))

03:29:42 executing program 4:
set_robust_list(&(0x7f0000001700), 0x18)

03:29:42 executing program 5:
syz_io_uring_setup(0x5251, &(0x7f0000001740), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000017c0), &(0x7f0000001800))

03:29:42 executing program 4:
set_robust_list(&(0x7f0000001700), 0x18)

03:29:42 executing program 6:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x24005004)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='freezer.self_freezing\x00', 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0))
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000800))
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'syztnl2\x00', 0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@private, @in=@multicast1}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)

03:29:42 executing program 4:
set_robust_list(&(0x7f0000001700), 0x18)

03:29:42 executing program 4:
set_robust_list(&(0x7f0000001700), 0x18)

03:29:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local}, 0xa, @in=@broadcast, 0x0, 0x1}}, 0xe8)

03:29:42 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockname$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @initdev}, &(0x7f0000000600)=0x10)

03:29:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local}, 0xa, @in=@broadcast, 0x0, 0x1}}, 0xe8)

[  137.020354] random: crng reseeded on system resumption
[  137.027492] Restarting kernel threads ... done.
03:29:43 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x60, 0x9)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

03:29:43 executing program 4:
r0 = syz_io_uring_setup(0x3162, &(0x7f0000000580), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

03:29:43 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)

03:29:43 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

03:29:43 executing program 1:
r0 = gettid()
capset(&(0x7f00000092c0)={0x20071026, r0}, &(0x7f0000009300))

03:29:43 executing program 5:
prctl$PR_SET_PDEATHSIG(0x1, 0x0)

03:29:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000080)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "5c0d517ad584da2f0601311c542d8dc587763c48d958e6604abfe45d34"}}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NODE={0xc8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc71, 0x3, "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"}]}, @TIPC_NLA_SOCK={0x4}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4040013}, 0x4000040)

[  137.118246] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure
[  137.128179] random: crng reseeded on system resumption
03:29:43 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x60, 0x9)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

[  137.146269] Restarting kernel threads ... done.
03:29:43 executing program 4:
r0 = syz_io_uring_setup(0x3162, &(0x7f0000000580), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

03:29:43 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

03:29:43 executing program 5:
prctl$PR_SET_PDEATHSIG(0x1, 0x0)

03:29:43 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_getscheduler(0x0)

03:29:43 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000003740), 0x0, 0x0)

03:29:43 executing program 1:
syz_mount_image$vfat(&(0x7f00000015c0), &(0x7f0000001600)='./file0\x00', 0x0, 0x1, &(0x7f0000002780)=[{&(0x7f0000001640)="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", 0x1ff, 0x1}], 0x0, &(0x7f0000002800))

03:29:43 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300100001500040028bd7000fcdbdf252b083d000100a45ae428936b6a4b1162cfed7ad73ce5ff1fd9835f01c4216ba72de85642df2d031dbc586692b80da0d695b7bbd5c4c8d0328a0c7fd0bfc37a0000003800010024f73f3912cab6c6c6372f527412174e5fa68fcb7ab51a7be90dcf202e775e73bd43ca8c09273a81bd853449efd85556ef776903a1000100d79ab5a4bf43fedcca3971ce1dcc6cc5acc0488e1a45e38f2ec8ab3d5483a97f270b929a207edf05b226fefb3203a4354c4e041ccda50f4d485bcabdb3e218bd3ffe7ae3535d1eebcbc41cd329b13ebd56a6ae6b0323cdf2acdbed5128c6f3e8d081b46cb344d96a07cf42d378ac67949e8ae1c2f908c886711083e12b4b7281c6b01e9425199330d0c0a4edc034a68687a1fd30a230dd7501538a83b0000000000067f3238979cb4c52a3f86cd7b866300ba3eed81383dcbef2b47da17a0dee570179ae0b7f82847989c6b6e2d20cb3ae755cee324faaac46a818"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x60, 0x9)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

03:29:43 executing program 4:
r0 = syz_io_uring_setup(0x3162, &(0x7f0000000580), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

03:29:43 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)

03:29:43 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x60, 0x9)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

[  137.321147] loop1: detected capacity change from 0 to 1
[  137.322573] FAT-fs (loop1): invalid media value (0x8b)
[  137.322952] FAT-fs (loop1): Can't find a valid FAT filesystem
[  137.340672] loop1: detected capacity change from 0 to 1
[  137.342249] FAT-fs (loop1): invalid media value (0x8b)
[  137.342637] FAT-fs (loop1): Can't find a valid FAT filesystem
[  137.420658] random: crng reseeded on system resumption
[  137.422441] Restarting kernel threads ... done.
03:29:43 executing program 5:
prctl$PR_SET_PDEATHSIG(0x1, 0x0)

03:29:43 executing program 4:
r0 = syz_io_uring_setup(0x3162, &(0x7f0000000580), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

03:29:43 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)

03:29:43 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001040)={0x200, 0x0, 0x0, "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"})

03:29:43 executing program 1:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x9, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
openat(r3, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0)
r4 = memfd_create(0x0, 0x1)
ftruncate(r0, 0x1)
dup(r4)

03:29:43 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x60, 0x9)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

03:29:43 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0)

03:29:43 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x60, 0x9)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

[  137.990631] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  138.057581] random: crng reseeded on system resumption
[  138.059342] Restarting kernel threads ... done.
03:29:43 executing program 5:
prctl$PR_SET_PDEATHSIG(0x1, 0x0)

03:29:43 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0)

03:29:43 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001040)={0x200, 0x0, 0x0, "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"})

[  138.086063] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
03:29:44 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000004a0001eb000000003ea5d7d00a"], 0x28}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)

03:29:44 executing program 1:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x9, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
openat(r3, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0)
r4 = memfd_create(0x0, 0x1)
ftruncate(r0, 0x1)
dup(r4)

03:29:44 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001040)={0x200, 0x0, 0x0, "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"})

03:29:44 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000004a0001eb000000003ea5d7d00a"], 0x28}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)

03:29:44 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000004a0001eb000000003ea5d7d00a"], 0x28}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)

03:29:44 executing program 0:
socketpair(0x10, 0x2, 0xe20e, &(0x7f0000000380))

03:29:44 executing program 4:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x1c}}, 0x0)

03:29:44 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0)

[  138.560544] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
03:29:44 executing program 5:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x9, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
openat(r3, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0)
r4 = memfd_create(0x0, 0x1)
ftruncate(r0, 0x1)
dup(r4)

03:29:44 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000004a0001eb000000003ea5d7d00a"], 0x28}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)

03:29:44 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0)

03:29:44 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001040)={0x200, 0x0, 0x0, "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"})

03:29:44 executing program 4:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x1c}}, 0x0)

03:29:44 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000004a0001eb000000003ea5d7d00a"], 0x28}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)

03:29:44 executing program 0:
socketpair(0x10, 0x2, 0xe20e, &(0x7f0000000380))

[  138.730708] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
03:29:44 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000004a0001eb000000003ea5d7d00a"], 0x28}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)

03:29:44 executing program 0:
socketpair(0x10, 0x2, 0xe20e, &(0x7f0000000380))

03:29:44 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000004a0001eb000000003ea5d7d00a"], 0x28}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)

03:29:44 executing program 0:
socketpair(0x10, 0x2, 0xe20e, &(0x7f0000000380))

03:29:44 executing program 4:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r0, 0x1, 0x0, 0x0, 
VM DIAGNOSIS:
03:29:37  Registers:
info registers vcpu 0
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823ba0b1 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff8880404d7690
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000033 R11=0000000000000001
R12=0000000000000033 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba0a0
RIP=ffffffff823ba109 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f5be15ef700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5be418d018 CR3=000000001b00c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f5be41607c0 00007f5be41607c8
YMM02=0000000000000000 0000000000000000 00007f5be41607e0 00007f5be41607c0
YMM03=0000000000000000 0000000000000000 00007f5be41607c8 00007f5be41607c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000033b60 RCX=0000000000000000 RDX=ffff88801ddeb580
RSI=0000000000000002 RDI=0000000000000000 RBP=ffffffff849ec6c0 RSP=ffff8880405d7a70
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000001 R13=ffffffff849ec680 R14=1ffffd400016ad1f R15=0000000000000200
RIP=ffffffff84250f6e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556b29400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbd63814000 CR3=000000001bd58000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000