Warning: Permanently added '[localhost]:45965' (ECDSA) to the list of known hosts.
2023/01/20 12:23:29 fuzzer started
2023/01/20 12:23:29 dialing manager at localhost:36725
syzkaller login: [   35.754234] cgroup: Unknown subsys name 'net'
[   35.859483] cgroup: Unknown subsys name 'rlimit'
2023/01/20 12:23:44 syscalls: 2217
2023/01/20 12:23:44 code coverage: enabled
2023/01/20 12:23:44 comparison tracing: enabled
2023/01/20 12:23:44 extra coverage: enabled
2023/01/20 12:23:44 setuid sandbox: enabled
2023/01/20 12:23:44 namespace sandbox: enabled
2023/01/20 12:23:44 Android sandbox: enabled
2023/01/20 12:23:44 fault injection: enabled
2023/01/20 12:23:44 leak checking: enabled
2023/01/20 12:23:44 net packet injection: enabled
2023/01/20 12:23:44 net device setup: enabled
2023/01/20 12:23:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/01/20 12:23:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/01/20 12:23:44 USB emulation: enabled
2023/01/20 12:23:44 hci packet injection: enabled
2023/01/20 12:23:44 wifi device emulation: enabled
2023/01/20 12:23:44 802.15.4 emulation: enabled
2023/01/20 12:23:44 fetching corpus: 0, signal 0/2000 (executing program)
2023/01/20 12:23:44 fetching corpus: 41, signal 23792/27452 (executing program)
2023/01/20 12:23:44 fetching corpus: 91, signal 38191/43357 (executing program)
2023/01/20 12:23:44 fetching corpus: 141, signal 48103/54709 (executing program)
2023/01/20 12:23:44 fetching corpus: 191, signal 55646/63625 (executing program)
2023/01/20 12:23:44 fetching corpus: 241, signal 63877/73086 (executing program)
2023/01/20 12:23:45 fetching corpus: 291, signal 71019/81417 (executing program)
2023/01/20 12:23:45 fetching corpus: 341, signal 77658/89125 (executing program)
2023/01/20 12:23:45 fetching corpus: 391, signal 80822/93484 (executing program)
2023/01/20 12:23:45 fetching corpus: 441, signal 85711/99418 (executing program)
2023/01/20 12:23:45 fetching corpus: 491, signal 90098/104824 (executing program)
2023/01/20 12:23:45 fetching corpus: 540, signal 92465/108321 (executing program)
2023/01/20 12:23:45 fetching corpus: 590, signal 94679/111594 (executing program)
2023/01/20 12:23:45 fetching corpus: 640, signal 100468/118144 (executing program)
2023/01/20 12:23:46 fetching corpus: 689, signal 103722/122292 (executing program)
2023/01/20 12:23:46 fetching corpus: 739, signal 106277/125779 (executing program)
2023/01/20 12:23:46 fetching corpus: 789, signal 110654/130832 (executing program)
2023/01/20 12:23:46 fetching corpus: 839, signal 114104/135000 (executing program)
2023/01/20 12:23:46 fetching corpus: 888, signal 117301/138848 (executing program)
2023/01/20 12:23:46 fetching corpus: 938, signal 119442/141846 (executing program)
2023/01/20 12:23:46 fetching corpus: 987, signal 122238/145336 (executing program)
2023/01/20 12:23:47 fetching corpus: 1037, signal 124442/148288 (executing program)
2023/01/20 12:23:47 fetching corpus: 1085, signal 126378/150958 (executing program)
2023/01/20 12:23:47 fetching corpus: 1135, signal 128538/153728 (executing program)
2023/01/20 12:23:47 fetching corpus: 1185, signal 130922/156750 (executing program)
2023/01/20 12:23:47 fetching corpus: 1235, signal 132630/159210 (executing program)
2023/01/20 12:23:47 fetching corpus: 1284, signal 134250/161526 (executing program)
2023/01/20 12:23:47 fetching corpus: 1334, signal 136464/164293 (executing program)
2023/01/20 12:23:47 fetching corpus: 1384, signal 137656/166284 (executing program)
2023/01/20 12:23:47 fetching corpus: 1434, signal 139496/168703 (executing program)
2023/01/20 12:23:48 fetching corpus: 1484, signal 141791/171462 (executing program)
2023/01/20 12:23:48 fetching corpus: 1534, signal 143751/173880 (executing program)
2023/01/20 12:23:48 fetching corpus: 1584, signal 145596/176233 (executing program)
2023/01/20 12:23:48 fetching corpus: 1633, signal 146380/177727 (executing program)
2023/01/20 12:23:48 fetching corpus: 1682, signal 148399/180100 (executing program)
2023/01/20 12:23:48 fetching corpus: 1732, signal 149570/181840 (executing program)
2023/01/20 12:23:48 fetching corpus: 1782, signal 151132/183852 (executing program)
2023/01/20 12:23:48 fetching corpus: 1832, signal 152670/185848 (executing program)
2023/01/20 12:23:49 fetching corpus: 1882, signal 153836/187529 (executing program)
2023/01/20 12:23:49 fetching corpus: 1932, signal 155346/189475 (executing program)
2023/01/20 12:23:49 fetching corpus: 1981, signal 157066/191551 (executing program)
2023/01/20 12:23:49 fetching corpus: 2030, signal 158253/193233 (executing program)
2023/01/20 12:23:49 fetching corpus: 2079, signal 159549/194948 (executing program)
2023/01/20 12:23:49 fetching corpus: 2129, signal 160930/196693 (executing program)
2023/01/20 12:23:49 fetching corpus: 2179, signal 161992/198232 (executing program)
2023/01/20 12:23:49 fetching corpus: 2228, signal 163270/199861 (executing program)
2023/01/20 12:23:49 fetching corpus: 2277, signal 164299/201310 (executing program)
2023/01/20 12:23:50 fetching corpus: 2327, signal 165465/202854 (executing program)
2023/01/20 12:23:50 fetching corpus: 2374, signal 166559/204278 (executing program)
2023/01/20 12:23:50 fetching corpus: 2423, signal 167896/205897 (executing program)
2023/01/20 12:23:50 fetching corpus: 2473, signal 169047/207345 (executing program)
2023/01/20 12:23:50 fetching corpus: 2523, signal 171449/209563 (executing program)
2023/01/20 12:23:50 fetching corpus: 2573, signal 172591/210971 (executing program)
2023/01/20 12:23:50 fetching corpus: 2623, signal 173817/212448 (executing program)
2023/01/20 12:23:50 fetching corpus: 2673, signal 174731/213724 (executing program)
2023/01/20 12:23:51 fetching corpus: 2723, signal 176094/215237 (executing program)
2023/01/20 12:23:51 fetching corpus: 2773, signal 176906/216403 (executing program)
2023/01/20 12:23:51 fetching corpus: 2823, signal 178227/217860 (executing program)
2023/01/20 12:23:51 fetching corpus: 2870, signal 179160/219091 (executing program)
2023/01/20 12:23:51 fetching corpus: 2919, signal 180173/220332 (executing program)
2023/01/20 12:23:51 fetching corpus: 2968, signal 180948/221456 (executing program)
2023/01/20 12:23:51 fetching corpus: 3018, signal 182067/222738 (executing program)
2023/01/20 12:23:51 fetching corpus: 3068, signal 183091/223958 (executing program)
2023/01/20 12:23:52 fetching corpus: 3117, signal 184092/225131 (executing program)
2023/01/20 12:23:52 fetching corpus: 3167, signal 184553/226007 (executing program)
2023/01/20 12:23:52 fetching corpus: 3217, signal 185462/227079 (executing program)
2023/01/20 12:23:52 fetching corpus: 3266, signal 186316/228140 (executing program)
2023/01/20 12:23:52 fetching corpus: 3316, signal 186945/229061 (executing program)
2023/01/20 12:23:52 fetching corpus: 3365, signal 187785/230072 (executing program)
2023/01/20 12:23:52 fetching corpus: 3415, signal 188522/231035 (executing program)
2023/01/20 12:23:52 fetching corpus: 3465, signal 189669/232203 (executing program)
2023/01/20 12:23:53 fetching corpus: 3515, signal 191447/233633 (executing program)
2023/01/20 12:23:53 fetching corpus: 3564, signal 192136/234526 (executing program)
2023/01/20 12:23:53 fetching corpus: 3614, signal 192887/235461 (executing program)
2023/01/20 12:23:53 fetching corpus: 3661, signal 193850/236513 (executing program)
2023/01/20 12:23:53 fetching corpus: 3709, signal 194632/237400 (executing program)
2023/01/20 12:23:53 fetching corpus: 3759, signal 195584/238388 (executing program)
2023/01/20 12:23:53 fetching corpus: 3808, signal 196090/239173 (executing program)
2023/01/20 12:23:53 fetching corpus: 3857, signal 196873/240056 (executing program)
2023/01/20 12:23:53 fetching corpus: 3907, signal 197341/240765 (executing program)
2023/01/20 12:23:54 fetching corpus: 3957, signal 197876/241563 (executing program)
2023/01/20 12:23:54 fetching corpus: 4007, signal 198741/242467 (executing program)
2023/01/20 12:23:54 fetching corpus: 4057, signal 199189/243173 (executing program)
2023/01/20 12:23:54 fetching corpus: 4107, signal 200003/244024 (executing program)
2023/01/20 12:23:54 fetching corpus: 4156, signal 200604/244765 (executing program)
2023/01/20 12:23:54 fetching corpus: 4206, signal 201123/245482 (executing program)
2023/01/20 12:23:54 fetching corpus: 4256, signal 201794/246225 (executing program)
2023/01/20 12:23:54 fetching corpus: 4306, signal 202533/247034 (executing program)
2023/01/20 12:23:55 fetching corpus: 4354, signal 203239/247732 (executing program)
2023/01/20 12:23:55 fetching corpus: 4403, signal 203919/248417 (executing program)
2023/01/20 12:23:55 fetching corpus: 4453, signal 204459/249109 (executing program)
2023/01/20 12:23:55 fetching corpus: 4501, signal 205059/249802 (executing program)
2023/01/20 12:23:55 fetching corpus: 4550, signal 206029/250562 (executing program)
2023/01/20 12:23:55 fetching corpus: 4600, signal 206538/251197 (executing program)
2023/01/20 12:23:55 fetching corpus: 4650, signal 207262/251913 (executing program)
2023/01/20 12:23:55 fetching corpus: 4699, signal 208152/252590 (executing program)
2023/01/20 12:23:56 fetching corpus: 4747, signal 208810/253294 (executing program)
2023/01/20 12:23:56 fetching corpus: 4796, signal 209684/254001 (executing program)
2023/01/20 12:23:56 fetching corpus: 4845, signal 211224/254819 (executing program)
2023/01/20 12:23:56 fetching corpus: 4894, signal 212068/255467 (executing program)
2023/01/20 12:23:56 fetching corpus: 4944, signal 212767/256075 (executing program)
2023/01/20 12:23:56 fetching corpus: 4994, signal 213211/256621 (executing program)
2023/01/20 12:23:56 fetching corpus: 5044, signal 213909/257252 (executing program)
2023/01/20 12:23:57 fetching corpus: 5094, signal 214542/257792 (executing program)
2023/01/20 12:23:57 fetching corpus: 5144, signal 215093/258374 (executing program)
2023/01/20 12:23:57 fetching corpus: 5194, signal 215508/258869 (executing program)
2023/01/20 12:23:57 fetching corpus: 5244, signal 216066/259457 (executing program)
2023/01/20 12:23:57 fetching corpus: 5293, signal 216928/260051 (executing program)
2023/01/20 12:23:57 fetching corpus: 5341, signal 217465/260527 (executing program)
2023/01/20 12:23:57 fetching corpus: 5391, signal 217993/261010 (executing program)
2023/01/20 12:23:57 fetching corpus: 5441, signal 218335/261488 (executing program)
2023/01/20 12:23:58 fetching corpus: 5491, signal 218965/261970 (executing program)
2023/01/20 12:23:58 fetching corpus: 5540, signal 219402/262446 (executing program)
2023/01/20 12:23:58 fetching corpus: 5590, signal 219850/262917 (executing program)
2023/01/20 12:23:58 fetching corpus: 5638, signal 220333/263389 (executing program)
2023/01/20 12:23:58 fetching corpus: 5687, signal 220815/263843 (executing program)
2023/01/20 12:23:58 fetching corpus: 5737, signal 221396/264266 (executing program)
2023/01/20 12:23:58 fetching corpus: 5787, signal 221901/264673 (executing program)
2023/01/20 12:23:59 fetching corpus: 5836, signal 222617/265115 (executing program)
2023/01/20 12:23:59 fetching corpus: 5886, signal 223142/265536 (executing program)
2023/01/20 12:23:59 fetching corpus: 5935, signal 223542/265935 (executing program)
2023/01/20 12:23:59 fetching corpus: 5983, signal 224354/266398 (executing program)
2023/01/20 12:23:59 fetching corpus: 6033, signal 224743/266797 (executing program)
2023/01/20 12:23:59 fetching corpus: 6083, signal 225369/267195 (executing program)
2023/01/20 12:23:59 fetching corpus: 6133, signal 225929/267575 (executing program)
2023/01/20 12:23:59 fetching corpus: 6182, signal 226467/267943 (executing program)
2023/01/20 12:23:59 fetching corpus: 6231, signal 227060/268348 (executing program)
2023/01/20 12:24:00 fetching corpus: 6279, signal 227390/268681 (executing program)
2023/01/20 12:24:00 fetching corpus: 6327, signal 227947/269020 (executing program)
2023/01/20 12:24:00 fetching corpus: 6376, signal 228322/269357 (executing program)
2023/01/20 12:24:00 fetching corpus: 6424, signal 228649/269657 (executing program)
2023/01/20 12:24:00 fetching corpus: 6473, signal 229438/269987 (executing program)
2023/01/20 12:24:00 fetching corpus: 6523, signal 230124/270313 (executing program)
2023/01/20 12:24:00 fetching corpus: 6573, signal 230546/270631 (executing program)
2023/01/20 12:24:01 fetching corpus: 6623, signal 230975/270945 (executing program)
2023/01/20 12:24:01 fetching corpus: 6672, signal 231380/271120 (executing program)
2023/01/20 12:24:01 fetching corpus: 6721, signal 231891/271120 (executing program)
2023/01/20 12:24:01 fetching corpus: 6771, signal 232333/271120 (executing program)
2023/01/20 12:24:01 fetching corpus: 6821, signal 233171/271120 (executing program)
2023/01/20 12:24:01 fetching corpus: 6868, signal 233835/271120 (executing program)
2023/01/20 12:24:01 fetching corpus: 6917, signal 234229/271120 (executing program)
2023/01/20 12:24:01 fetching corpus: 6967, signal 234701/271145 (executing program)
2023/01/20 12:24:02 fetching corpus: 7014, signal 235035/271145 (executing program)
2023/01/20 12:24:02 fetching corpus: 7064, signal 235459/271145 (executing program)
2023/01/20 12:24:02 fetching corpus: 7113, signal 235911/271171 (executing program)
2023/01/20 12:24:02 fetching corpus: 7161, signal 236292/271171 (executing program)
2023/01/20 12:24:02 fetching corpus: 7208, signal 236756/271172 (executing program)
2023/01/20 12:24:02 fetching corpus: 7258, signal 237408/271172 (executing program)
2023/01/20 12:24:02 fetching corpus: 7305, signal 237828/271172 (executing program)
2023/01/20 12:24:02 fetching corpus: 7355, signal 238437/271172 (executing program)
2023/01/20 12:24:03 fetching corpus: 7405, signal 238954/271172 (executing program)
2023/01/20 12:24:03 fetching corpus: 7455, signal 239405/271172 (executing program)
2023/01/20 12:24:03 fetching corpus: 7505, signal 240019/271172 (executing program)
2023/01/20 12:24:03 fetching corpus: 7555, signal 240414/271172 (executing program)
2023/01/20 12:24:03 fetching corpus: 7604, signal 240848/271172 (executing program)
2023/01/20 12:24:03 fetching corpus: 7653, signal 241339/271239 (executing program)
2023/01/20 12:24:03 fetching corpus: 7703, signal 241759/271239 (executing program)
2023/01/20 12:24:03 fetching corpus: 7752, signal 242127/271239 (executing program)
2023/01/20 12:24:04 fetching corpus: 7802, signal 242512/271241 (executing program)
2023/01/20 12:24:04 fetching corpus: 7852, signal 242880/271241 (executing program)
2023/01/20 12:24:04 fetching corpus: 7900, signal 243456/271241 (executing program)
2023/01/20 12:24:04 fetching corpus: 7950, signal 243913/271241 (executing program)
2023/01/20 12:24:04 fetching corpus: 7999, signal 244378/271241 (executing program)
2023/01/20 12:24:04 fetching corpus: 8049, signal 244728/271241 (executing program)
2023/01/20 12:24:04 fetching corpus: 8099, signal 245072/271241 (executing program)
2023/01/20 12:24:04 fetching corpus: 8149, signal 245540/271241 (executing program)
2023/01/20 12:24:04 fetching corpus: 8198, signal 245984/271241 (executing program)
2023/01/20 12:24:05 fetching corpus: 8248, signal 246273/271241 (executing program)
2023/01/20 12:24:05 fetching corpus: 8298, signal 246781/271241 (executing program)
2023/01/20 12:24:05 fetching corpus: 8348, signal 246984/271241 (executing program)
2023/01/20 12:24:05 fetching corpus: 8396, signal 247327/271241 (executing program)
2023/01/20 12:24:05 fetching corpus: 8444, signal 247668/271241 (executing program)
2023/01/20 12:24:05 fetching corpus: 8493, signal 248137/271241 (executing program)
2023/01/20 12:24:05 fetching corpus: 8541, signal 248383/271277 (executing program)
2023/01/20 12:24:05 fetching corpus: 8590, signal 248747/271277 (executing program)
2023/01/20 12:24:06 fetching corpus: 8639, signal 249066/271277 (executing program)
2023/01/20 12:24:06 fetching corpus: 8689, signal 249285/271277 (executing program)
2023/01/20 12:24:06 fetching corpus: 8739, signal 249979/271277 (executing program)
2023/01/20 12:24:06 fetching corpus: 8788, signal 250543/271277 (executing program)
2023/01/20 12:24:06 fetching corpus: 8838, signal 250894/271277 (executing program)
2023/01/20 12:24:06 fetching corpus: 8885, signal 251378/271278 (executing program)
2023/01/20 12:24:06 fetching corpus: 8933, signal 251798/271278 (executing program)
2023/01/20 12:24:06 fetching corpus: 8983, signal 252110/271278 (executing program)
2023/01/20 12:24:07 fetching corpus: 9033, signal 252489/271278 (executing program)
2023/01/20 12:24:07 fetching corpus: 9083, signal 252941/271278 (executing program)
2023/01/20 12:24:07 fetching corpus: 9133, signal 253421/271278 (executing program)
2023/01/20 12:24:07 fetching corpus: 9182, signal 253796/271279 (executing program)
2023/01/20 12:24:07 fetching corpus: 9230, signal 254340/271279 (executing program)
2023/01/20 12:24:07 fetching corpus: 9279, signal 254834/271279 (executing program)
2023/01/20 12:24:07 fetching corpus: 9329, signal 255353/271279 (executing program)
2023/01/20 12:24:07 fetching corpus: 9379, signal 255838/271280 (executing program)
2023/01/20 12:24:08 fetching corpus: 9429, signal 256259/271280 (executing program)
2023/01/20 12:24:08 fetching corpus: 9478, signal 256526/271283 (executing program)
2023/01/20 12:24:08 fetching corpus: 9527, signal 256732/271298 (executing program)
2023/01/20 12:24:08 fetching corpus: 9577, signal 257091/271298 (executing program)
2023/01/20 12:24:08 fetching corpus: 9626, signal 257386/271298 (executing program)
2023/01/20 12:24:08 fetching corpus: 9676, signal 257713/271298 (executing program)
2023/01/20 12:24:08 fetching corpus: 9725, signal 258093/271319 (executing program)
2023/01/20 12:24:08 fetching corpus: 9774, signal 258545/271319 (executing program)
2023/01/20 12:24:08 fetching corpus: 9824, signal 258894/271319 (executing program)
2023/01/20 12:24:09 fetching corpus: 9874, signal 259225/271319 (executing program)
2023/01/20 12:24:09 fetching corpus: 9923, signal 259599/271319 (executing program)
2023/01/20 12:24:09 fetching corpus: 9970, signal 259930/271348 (executing program)
2023/01/20 12:24:09 fetching corpus: 10020, signal 260275/271348 (executing program)
2023/01/20 12:24:09 fetching corpus: 10070, signal 260712/271348 (executing program)
2023/01/20 12:24:09 fetching corpus: 10117, signal 261035/271375 (executing program)
2023/01/20 12:24:09 fetching corpus: 10167, signal 261258/271375 (executing program)
2023/01/20 12:24:09 fetching corpus: 10215, signal 261572/271375 (executing program)
2023/01/20 12:24:10 fetching corpus: 10264, signal 261877/271378 (executing program)
2023/01/20 12:24:10 fetching corpus: 10314, signal 262288/271384 (executing program)
2023/01/20 12:24:10 fetching corpus: 10364, signal 262663/271384 (executing program)
2023/01/20 12:24:10 fetching corpus: 10411, signal 262930/271384 (executing program)
2023/01/20 12:24:10 fetching corpus: 10460, signal 263228/271384 (executing program)
2023/01/20 12:24:10 fetching corpus: 10510, signal 263402/271384 (executing program)
2023/01/20 12:24:10 fetching corpus: 10560, signal 263906/271391 (executing program)
2023/01/20 12:24:10 fetching corpus: 10609, signal 264196/271391 (executing program)
2023/01/20 12:24:11 fetching corpus: 10659, signal 264533/271403 (executing program)
2023/01/20 12:24:11 fetching corpus: 10709, signal 264872/271403 (executing program)
2023/01/20 12:24:11 fetching corpus: 10759, signal 265063/271403 (executing program)
2023/01/20 12:24:11 fetching corpus: 10807, signal 265375/271403 (executing program)
2023/01/20 12:24:11 fetching corpus: 10856, signal 265930/271403 (executing program)
2023/01/20 12:24:11 fetching corpus: 10905, signal 266215/271464 (executing program)
2023/01/20 12:24:11 fetching corpus: 10954, signal 266493/271464 (executing program)
2023/01/20 12:24:12 fetching corpus: 11004, signal 266900/271464 (executing program)
2023/01/20 12:24:12 fetching corpus: 11053, signal 267235/271464 (executing program)
2023/01/20 12:24:12 fetching corpus: 11103, signal 267775/271464 (executing program)
2023/01/20 12:24:12 fetching corpus: 11153, signal 268095/271464 (executing program)
2023/01/20 12:24:12 fetching corpus: 11181, signal 268250/271464 (executing program)
2023/01/20 12:24:12 fetching corpus: 11181, signal 268250/271464 (executing program)
2023/01/20 12:24:15 starting 8 fuzzer processes
12:24:15 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10)

12:24:15 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c009eca19231fdcc9eb89a23ded0774e6d09e4a4cdce6d9fc27bb0000d46c40bb66ed5094c9ff5b97d099536efbe9b1577814508b173a7a3502467d7f2c01000000000000bde7cde1dd7384b746dc4c378116feef66fff69769b0b66f3893"])

12:24:15 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x2)

12:24:15 executing program 4:
io_setup(0x0, 0xfffffffffffffffe)

12:24:15 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, <r2=>0x0})
perf_event_open(0x0, 0x0, 0x0, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup(r0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)

[   81.126778] audit: type=1400 audit(1674217455.489:6): avc:  denied  { execmem } for  pid=258 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:24:15 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:24:15 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x6f, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x0, 0x0, "81514db91623d6c497fe008260b40d8d09a7e29afb0d237709e0facaba577c62f19c89bf2212f7545cf8472a5a45df84d71320d324"}}}}}}, 0x0)
recvfrom(r0, &(0x7f0000000080)=""/231, 0xe7, 0x0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80)

12:24:15 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x80, 0x62, 0x1, 0x34b5}, {0x6, 0xcf, 0x5, 0xc1c8}]})

[   82.364028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.365848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.367375] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.370220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.371301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.372962] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.374571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.383735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.386776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.431567] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   82.434806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   82.441384] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   82.445329] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.447053] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   82.449005] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   82.451059] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.452763] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.453829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   82.455974] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.457530] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.458674] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.459849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.461656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.463385] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.467433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.470234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   82.472609] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   82.474519] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.475461] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   82.476268] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   82.483573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.491648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.494794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.496496] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.498073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.503120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   82.505808] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   82.507047] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   82.515523] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.516800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.525706] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.527181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.529606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.551472] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.568009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.574662] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.585877] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   82.590789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.437697] Bluetooth: hci0: command 0x0409 tx timeout
[   84.501223] Bluetooth: hci4: command 0x0409 tx timeout
[   84.502237] Bluetooth: hci1: command 0x0409 tx timeout
[   84.502255] Bluetooth: hci7: command 0x0409 tx timeout
[   84.565254] Bluetooth: hci6: command 0x0409 tx timeout
[   84.565290] Bluetooth: hci2: command 0x0409 tx timeout
[   84.630303] Bluetooth: hci3: command 0x0409 tx timeout
[   84.693254] Bluetooth: hci5: command 0x0409 tx timeout
[   86.485200] Bluetooth: hci0: command 0x041b tx timeout
[   86.549319] Bluetooth: hci1: command 0x041b tx timeout
[   86.549711] Bluetooth: hci7: command 0x041b tx timeout
[   86.550121] Bluetooth: hci4: command 0x041b tx timeout
[   86.613222] Bluetooth: hci2: command 0x041b tx timeout
[   86.614210] Bluetooth: hci6: command 0x041b tx timeout
[   86.677212] Bluetooth: hci3: command 0x041b tx timeout
[   86.741360] Bluetooth: hci5: command 0x041b tx timeout
[   88.533226] Bluetooth: hci0: command 0x040f tx timeout
[   88.597257] Bluetooth: hci4: command 0x040f tx timeout
[   88.598016] Bluetooth: hci7: command 0x040f tx timeout
[   88.599303] Bluetooth: hci1: command 0x040f tx timeout
[   88.661240] Bluetooth: hci6: command 0x040f tx timeout
[   88.661661] Bluetooth: hci2: command 0x040f tx timeout
[   88.725193] Bluetooth: hci3: command 0x040f tx timeout
[   88.789244] Bluetooth: hci5: command 0x040f tx timeout
[   90.581227] Bluetooth: hci0: command 0x0419 tx timeout
[   90.645206] Bluetooth: hci1: command 0x0419 tx timeout
[   90.645622] Bluetooth: hci7: command 0x0419 tx timeout
[   90.646013] Bluetooth: hci4: command 0x0419 tx timeout
[   90.709202] Bluetooth: hci2: command 0x0419 tx timeout
[   90.709634] Bluetooth: hci6: command 0x0419 tx timeout
[   90.773189] Bluetooth: hci3: command 0x0419 tx timeout
[   90.837200] Bluetooth: hci5: command 0x0419 tx timeout
[  134.086780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.087457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.089192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  134.281406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.281983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.285309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  135.301354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.301942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.303578] audit: type=1400 audit(1674217509.665:7): avc:  denied  { open } for  pid=3773 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  135.304846] audit: type=1400 audit(1674217509.665:8): avc:  denied  { kernel } for  pid=3773 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  135.306104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  135.324160] hrtimer: interrupt took 33042 ns
[  135.343356] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  135.343356]    program syz-executor.5 not setting count and/or reply_len properly
[  135.363574] ------------[ cut here ]------------
[  135.364084] WARNING: CPU: 1 PID: 3774 at lib/iov_iter.c:629 _copy_from_iter+0x2bf/0x1170
[  135.364821] Modules linked in:
[  135.365330] CPU: 1 PID: 3774 Comm: syz-executor.5 Not tainted 6.2.0-rc4-next-20230120 #1
[  135.366041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  135.368381] RIP: 0010:_copy_from_iter+0x2bf/0x1170
[  135.370104] Code: 5d 41 5e 41 5f e9 95 42 33 02 e8 cc cc 37 ff be 79 02 00 00 48 c7 c7 80 e3 9e 84 e8 3b 68 5b ff e9 48 fe ff ff e8 b1 cc 37 ff <0f> 0b 45 31 f6 eb 87 e8 a5 cc 37 ff 31 ff 89 ee e8 6c c8 37 ff 40
[  135.373532] RSP: 0018:ffff88800caaf608 EFLAGS: 00010216
[  135.375791] RAX: 0000000000007219 RBX: 0000000000000000 RCX: ffffc90003dde000
[  135.377911] RDX: 0000000000040000 RSI: ffffffff8211ac4f RDI: 0000000000000001
[  135.379605] RBP: 0000000000001000 R08: 0000000000000001 R09: 0000000000000000
[  135.381168] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800caaf838
[  135.382771] R13: ffffea0001046800 R14: 0000000000001000 R15: ffff88800caaf838
[  135.383460] FS:  00007f42f9070700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  135.384223] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.384800] CR2: 00007ff0eb719269 CR3: 0000000040a24000 CR4: 0000000000350ee0
[  135.385500] Call Trace:
[  135.385864]  <TASK>
[  135.386341]  ? lock_is_held_type+0xdb/0x130
[  135.386871]  ? __pfx__copy_from_iter+0x10/0x10
[  135.387440]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.388034]  ? lockdep_hardirqs_on+0x7d/0x100
[  135.388561]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.389231]  copy_page_from_iter+0x251/0x430
[  135.389793]  blk_rq_map_user_iov+0xb41/0x16c0
[  135.390423]  ? lock_is_held_type+0x41/0x130
[  135.391003]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  135.391564]  ? sg_common_write.constprop.0+0xc51/0x15f0
[  135.392220]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.392893]  blk_rq_map_user_io+0x1d1/0x200
[  135.393471]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  135.394020]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  135.394713]  ? sg_build_indirect.isra.0+0x3b2/0x640
[  135.395360]  sg_common_write.constprop.0+0xd8d/0x15f0
[  135.396011]  ? __pfx_sg_common_write.constprop.0+0x10/0x10
[  135.396661]  ? _raw_spin_unlock_irqrestore+0x37/0x60
[  135.397331]  sg_write.part.0+0x698/0xa90
[  135.397864]  ? __pfx_sg_write.part.0+0x10/0x10
[  135.398441]  ? perf_tp_event+0x7cf/0x1100
[  135.398931]  ? irqentry_enter+0x2a/0x60
[  135.399470]  ? lock_is_held_type+0xdb/0x130
[  135.400021]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.400620]  ? lockdep_hardirqs_on+0x7d/0x100
[  135.401121]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.401844]  ? avc_policy_seqno+0xd/0x70
[  135.402383]  ? avc_policy_seqno+0x29/0x70
[  135.402861]  ? avc_policy_seqno+0xd/0x70
[  135.403420]  ? selinux_file_permission+0x96/0x520
[  135.404053]  sg_write+0x8d/0xe0
[  135.404541]  vfs_write+0x2cf/0xdd0
[  135.404961]  ? __pfx_sg_write+0x10/0x10
[  135.405493]  ? __pfx_vfs_write+0x10/0x10
[  135.405941]  ? __pfx___fget_files+0x10/0x10
[  135.406563]  ? __fget_files+0x270/0x480
[  135.407121]  ? __fget_light+0xe5/0x280
[  135.407681]  ksys_write+0x12b/0x260
[  135.408163]  ? __pfx_ksys_write+0x10/0x10
[  135.408660]  ? syscall_enter_from_user_mode+0x2b/0x50
[  135.409290]  do_syscall_64+0x3f/0x90
[  135.409713]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  135.410293] RIP: 0033:0x7f42fbafab19
[  135.410741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  135.412121] RSP: 002b:00007f42f9070188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  135.412880] RAX: ffffffffffffffda RBX: 00007f42fbc0df60 RCX: 00007f42fbafab19
[  135.413541] RDX: 0000000000000125 RSI: 00000000200003c0 RDI: 0000000000000005
[  135.414181] RBP: 00007f42fbb54f6d R08: 0000000000000000 R09: 0000000000000000
[  135.414840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.415521] R13: 00007ffc879175ff R14: 00007f42f9070300 R15: 0000000000022000
[  135.416340]  </TASK>
[  135.416713] irq event stamp: 7447
[  135.417080] hardirqs last  enabled at (7483): [<ffffffff8460144a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.417951] hardirqs last disabled at (7526): [<ffffffff8442a24f>] sysvec_apic_timer_interrupt+0xf/0xc0
[  135.418781] softirqs last  enabled at (2786): [<ffffffff81182fef>] irq_exit_rcu+0x11f/0x190
[  135.419531] softirqs last disabled at (2619): [<ffffffff81182fef>] irq_exit_rcu+0x11f/0x190
[  135.420291] ---[ end trace 0000000000000000 ]---
[  135.493830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.494940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.497024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  135.645400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3774 comm=syz-executor.5
[  135.659289] audit: type=1400 audit(1674217510.020:9): avc:  denied  { read } for  pid=3773 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  135.850789] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  135.850789]    program syz-executor.5 not setting count and/or reply_len properly
[  135.861974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3774 comm=syz-executor.5
12:25:10 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

[  136.032926] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  136.032926]    program syz-executor.5 not setting count and/or reply_len properly
[  136.098845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3816 comm=syz-executor.5
[  136.170469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.171035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.172634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  136.364744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.365372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.366781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  136.471918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.472528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.473936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:25:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

[  136.512842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.513426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.514905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  136.594343] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  136.594343]    program syz-executor.6 not setting count and/or reply_len properly
[  136.666904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3846 comm=syz-executor.6
[  136.759724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.760428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.765221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
12:25:11 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

[  136.911431] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  136.911431]    program syz-executor.5 not setting count and/or reply_len properly
[  136.975883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3859 comm=syz-executor.5
[  136.985784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.986892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.988764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:25:11 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

[  137.510729] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  137.510729]    program syz-executor.6 not setting count and/or reply_len properly
[  137.586081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3888 comm=syz-executor.6
[  137.634015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.634677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.636427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  137.709027] device syz_tun entered promiscuous mode
[  137.723582] device syz_tun left promiscuous mode
[  137.731528] device syz_tun entered promiscuous mode
[  137.736285] device syz_tun left promiscuous mode
12:25:12 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:12 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

[  137.787397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.787985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.789314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  137.802206] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  137.802206]    program syz-executor.2 not setting count and/or reply_len properly
[  137.804926] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  137.804926]    program syz-executor.5 not setting count and/or reply_len properly
[  137.865010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3912 comm=syz-executor.5
[  137.872817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3908 comm=syz-executor.2
[  138.298205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.298869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.300677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  138.347294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.347888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.349412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  138.466475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.467103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.468430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  138.548550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.549158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.550614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  138.564896] audit: type=1326 audit(1674217512.927:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3937 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca3beb19 code=0x0
12:25:13 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:13 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:13 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, <r2=>0x0})
perf_event_open(0x0, 0x0, 0x0, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup(r0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)

12:25:13 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, <r2=>0x0})
perf_event_open(0x0, 0x0, 0x0, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup(r0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)

12:25:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

[  139.169207] device syz_tun entered promiscuous mode
12:25:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c009eca19231fdcc9eb89a23ded0774e6d09e4a4cdce6d9fc27bb0000d46c40bb66ed5094c9ff5b97d099536efbe9b1577814508b173a7a3502467d7f2c01000000000000bde7cde1dd7384b746dc4c378116feef66fff69769b0b66f3893"])

12:25:13 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10)

[  139.183977] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  139.183977]    program syz-executor.2 not setting count and/or reply_len properly
[  139.185593] device syz_tun left promiscuous mode
[  139.193567] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  139.193567]    program syz-executor.6 not setting count and/or reply_len properly
[  139.237527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3974 comm=syz-executor.6
12:25:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10)

[  139.269830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3961 comm=syz-executor.2
12:25:13 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, <r2=>0x0})
perf_event_open(0x0, 0x0, 0x0, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup(r0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)

[  139.293397] device syz_tun entered promiscuous mode
[  139.320600] device syz_tun left promiscuous mode
12:25:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10)

12:25:13 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c009eca19231fdcc9eb89a23ded0774e6d09e4a4cdce6d9fc27bb0000d46c40bb66ed5094c9ff5b97d099536efbe9b1577814508b173a7a3502467d7f2c01000000000000bde7cde1dd7384b746dc4c378116feef66fff69769b0b66f3893"])

[  139.430996] device syz_tun entered promiscuous mode
[  139.447495] device syz_tun left promiscuous mode
12:25:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:13 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:14 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c009eca19231fdcc9eb89a23ded0774e6d09e4a4cdce6d9fc27bb0000d46c40bb66ed5094c9ff5b97d099536efbe9b1577814508b173a7a3502467d7f2c01000000000000bde7cde1dd7384b746dc4c378116feef66fff69769b0b66f3893"])

12:25:14 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:14 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:14 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c009eca19231fdcc9eb89a23ded0774e6d09e4a4cdce6d9fc27bb0000d46c40bb66ed5094c9ff5b97d099536efbe9b1577814508b173a7a3502467d7f2c01000000000000bde7cde1dd7384b746dc4c378116feef66fff69769b0b66f3893"])

12:25:15 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, <r2=>0x0})
perf_event_open(0x0, 0x0, 0x0, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup(r0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)

12:25:15 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c009eca19231fdcc9eb89a23ded0774e6d09e4a4cdce6d9fc27bb0000d46c40bb66ed5094c9ff5b97d099536efbe9b1577814508b173a7a3502467d7f2c01000000000000bde7cde1dd7384b746dc4c378116feef66fff69769b0b66f3893"])

12:25:15 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, <r2=>0x0})
perf_event_open(0x0, 0x0, 0x0, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup(r0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)

12:25:15 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:15 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:15 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c009eca19231fdcc9eb89a23ded0774e6d09e4a4cdce6d9fc27bb0000d46c40bb66ed5094c9ff5b97d099536efbe9b1577814508b173a7a3502467d7f2c01000000000000bde7cde1dd7384b746dc4c378116feef66fff69769b0b66f3893"])

12:25:15 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

12:25:15 executing program 2:
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x293f, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000300))

[  140.817490] sg_write: 6 callbacks suppressed
[  140.817513] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  140.817513]    program syz-executor.4 not setting count and/or reply_len properly
[  140.829350] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  140.829350]    program syz-executor.5 not setting count and/or reply_len properly
[  140.839505] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  140.839505]    program syz-executor.0 not setting count and/or reply_len properly
[  140.876312] selinux_netlink_send: 6 callbacks suppressed
[  140.876336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=4013 comm=syz-executor.4
[  140.933783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=4017 comm=syz-executor.5
[  140.946932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=4018 comm=syz-executor.0
12:25:15 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000400)='asymmetric\x00', &(0x7f0000000180)=@chain)
keyctl$link(0x8, r0, r1)

12:25:15 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000400)='asymmetric\x00', &(0x7f0000000180)=@chain)
keyctl$link(0x8, r0, r1)

12:25:15 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000400)='asymmetric\x00', &(0x7f0000000180)=@chain)
keyctl$link(0x8, r0, r1)

12:25:15 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125)
close_range(r1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3)
r3 = io_uring_setup(0x62db, &(0x7f0000001040))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x2)

[  141.327250] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
[  141.327250]    program syz-executor.0 not setting count and/or reply_len properly
12:25:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:15 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000400)='asymmetric\x00', &(0x7f0000000180)=@chain)
keyctl$link(0x8, r0, r1)

[  141.399703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=4036 comm=syz-executor.0
12:25:15 executing program 6:
syz_emit_ethernet(0x5e, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "706087", 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0)

12:25:15 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000640))

12:25:16 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, <r2=>0x0})
perf_event_open(0x0, 0x0, 0x0, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup(r0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)

12:25:16 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000007080)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x2c, {0x2, 0x0, @loopback}, 'syz_tun\x00'})

12:25:16 executing program 6:
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfd16}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xeaf, 0xffffffffffffffff})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')
pread64(r2, &(0x7f0000000640)=""/221, 0xdd, 0xffff)

12:25:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
tee(r1, r0, 0x80000000, 0x0)

12:25:16 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0)
getitimer(0x0, 0x0)

12:25:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:16 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000dcea2ef1e630a6c1aa615e5349d32a356af08a345b54fc2234c6d738f7d48eae1315d6a21fd9a593e573c46323927c103369a61bcf120ea43fce79863b0b947b860e3b6cf2b893edcf720f95c3a198715950dcb99c02bb64812c85233d92e39e0a94bbbf89403d7a09019f8ffd7e19f1e6bc5034767879cabba1c11727184648a27654f4c5299801bd92b79b6e6dfb29f89d0ba30d61cbd449a516e1773ccb55f8a73e08f58037cb43c4dde43bc1d3fdf70951458a94c95beae53c28e0afac714f74c555617ea65b5f3ac529ff5c165b7603405796501022478a7bf2e0c0ac942b81641b361c8bfa1edb7d3c80127802b41ff73b5b3359437166faaf650df268d5370fcd45ad1", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:16 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00')
read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9)

12:25:16 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0)
getitimer(0x0, 0x0)

12:25:16 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00')
read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9)

12:25:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0)
getitimer(0x0, 0x0)

12:25:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000dcea2ef1e630a6c1aa615e5349d32a356af08a345b54fc2234c6d738f7d48eae1315d6a21fd9a593e573c46323927c103369a61bcf120ea43fce79863b0b947b860e3b6cf2b893edcf720f95c3a198715950dcb99c02bb64812c85233d92e39e0a94bbbf89403d7a09019f8ffd7e19f1e6bc5034767879cabba1c11727184648a27654f4c5299801bd92b79b6e6dfb29f89d0ba30d61cbd449a516e1773ccb55f8a73e08f58037cb43c4dde43bc1d3fdf70951458a94c95beae53c28e0afac714f74c555617ea65b5f3ac529ff5c165b7603405796501022478a7bf2e0c0ac942b81641b361c8bfa1edb7d3c80127802b41ff73b5b3359437166faaf650df268d5370fcd45ad1", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:16 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0)
getitimer(0x0, 0x0)

12:25:16 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00')
read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9)

12:25:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:17 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0)
getitimer(0x0, 0x0)

12:25:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:17 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0)
getitimer(0x0, 0x0)

12:25:17 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00')
read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9)

12:25:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:17 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x401)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = accept4(r2, 0x0, &(0x7f0000000100), 0x0)
dup2(r3, r0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f00000001c0)={0x8d})
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
io_setup(0x373, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x1000000d})
dup2(0xffffffffffffffff, r1)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x32)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
preadv(r1, &(0x7f0000001600), 0x0, 0xfffffff9, 0xcb1)

12:25:17 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0)
getitimer(0x0, 0x0)

[  143.135608] audit: type=1400 audit(1674217517.496:11): avc:  denied  { block_suspend } for  pid=4105 comm="syz-executor.3" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
12:25:17 executing program 4:
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017})
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffffa, 0x0, 0x0)

12:25:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:17 executing program 5:
r0 = epoll_create(0x73e)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000880)={0x10000000})

12:25:17 executing program 6:
r0 = socket$unix(0x1, 0x5, 0x0)
io_setup(0x4e, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

12:25:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00'])
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r4)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB])

12:25:17 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000002700))

12:25:18 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x401)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = accept4(r2, 0x0, &(0x7f0000000100), 0x0)
dup2(r3, r0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f00000001c0)={0x8d})
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
io_setup(0x373, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x1000000d})
dup2(0xffffffffffffffff, r1)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x32)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
preadv(r1, &(0x7f0000001600), 0x0, 0xfffffff9, 0xcb1)

12:25:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0xa)
r1 = fsopen(0x0, 0x1)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r2, 0x5608)
write(r2, &(0x7f0000000000)="f7353de933794812ea9a03fa24fa2766e8a138428eb36ab8cbb5981f0351ae8d24107b669fd7b9338ec1f5feb7b44646a8183f4b4b9ce9b46b79f3191e2afcc82b8c31b6b0530bc8424f3b72fe4b", 0x4e)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x84)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup3(r4, r3, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r5=>0x0)
pidfd_open(r5, 0x0)

12:25:18 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file1\x00')
mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)='./file1\x00')

12:25:18 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000080)={0x0, 0x0}, 0x10)

12:25:18 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10)

12:25:18 executing program 4:
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017})
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffffa, 0x0, 0x0)

12:25:18 executing program 6:
r0 = socket$unix(0x1, 0x5, 0x0)
io_setup(0x4e, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

12:25:18 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x401)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = accept4(r2, 0x0, &(0x7f0000000100), 0x0)
dup2(r3, r0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f00000001c0)={0x8d})
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
io_setup(0x373, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x1000000d})
dup2(0xffffffffffffffff, r1)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x32)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
preadv(r1, &(0x7f0000001600), 0x0, 0xfffffff9, 0xcb1)

12:25:18 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81000)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x28, 0x0, "704f5992eebeaa2888e479ca552ee155f638582a91ca97213ff4064a2e4c350cdc3f9f62a4c21970c8149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
syz_io_uring_setup(0x43d7, &(0x7f00000016c0)={0x0, 0x0, 0x2, 0x2, 0x101, 0x0, r1}, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x101000, 0x144)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000), 0x6)
recvmmsg$unix(r2, &(0x7f0000002dc0)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000002900)=[{&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/81, 0x51}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001600)=""/20, 0x14}, {&(0x7f0000001740)=""/216, 0xd8}, {&(0x7f0000001640)=""/19, 0x13}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/171, 0xab}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000029c0), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/172, 0xac}], 0x1, &(0x7f0000002b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r4=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000002c00), 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002c80)=""/78, 0x4e}, {&(0x7f0000002d00)=""/5, 0x5}], 0x2, &(0x7f0000002d80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x3, 0x2160, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000300), 0x100a, &(0x7f0000002e80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@cache_loose}, {@privport}, {@version_u}, {@cache_fscache}, {@nodevmap}], [{@uid_eq={'uid', 0x3d, r4}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '{'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xee01}}, {@dont_appraise}, {@smackfsroot={'smackfsroot', 0x3d, '(-\\^'}}, {@fsname={'fsname', 0x3d, '\x00'}}]}})
getsockname$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c)
write$bt_hci(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(r2, &(0x7f0000002fc0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x8, 0xba, 0x3f, 0xa0, "02927bd808ce422c0d6a70a7e28115f9db6254ea0f113486d594bc219d6be3"}}}, 0x27)
write$bt_hci(r3, &(0x7f0000000040)={0x1, @le_conn_param_req_neg_reply={{0x2021, 0x3}, {0xc8, 0x1}}}, 0x7)

12:25:18 executing program 6:
r0 = socket$unix(0x1, 0x5, 0x0)
io_setup(0x4e, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

12:25:18 executing program 4:
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017})
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffffa, 0x0, 0x0)

12:25:18 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$inet6(0xa, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2404c080)

12:25:18 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3, 0x1c)

12:25:18 executing program 6:
r0 = socket$unix(0x1, 0x5, 0x0)
io_setup(0x4e, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

12:25:18 executing program 4:
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017})
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffffa, 0x0, 0x0)

12:25:18 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$inet6(0xa, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2404c080)

12:25:19 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x401)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = accept4(r2, 0x0, &(0x7f0000000100), 0x0)
dup2(r3, r0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f00000001c0)={0x8d})
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
io_setup(0x373, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x1000000d})
dup2(0xffffffffffffffff, r1)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x32)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
preadv(r1, &(0x7f0000001600), 0x0, 0xfffffff9, 0xcb1)

12:25:19 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x8, 0x0, 0x
VM DIAGNOSIS:
12:25:09  Registers:
info registers vcpu 0
RAX=0000000080000001 RBX=0000000000000001 RCX=1ffffffff0f3cdf8 RDX=0000000000000000
RSI=ffffffff81385e70 RDI=0000000000000001 RBP=ffff88801a10f590 RSP=ffff88801a10f4a0
R8 =ffffffff8604f22c R9 =ffffffff8604f230 R10=fffffbfff0ecb733 R11=ffff88801a10f578
R12=ffff88801a10f600 R13=0000000000000000 R14=ffff88801a10f538 R15=ffff888006919600
RIP=ffffffff8122110e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0a543d8540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe78efd4e000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe78efd4c000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0a544a9710 CR3=000000001f1e0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff824837c5 RDI=ffffffff87dedca0 RBP=ffffffff87dedc60 RSP=ffff88800caaef80
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001
R12=0000000000000034 R13=ffffffff87dedc60 R14=0000000000000010 R15=ffffffff824837b0
RIP=ffffffff8248381d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f42f9070700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe778c58a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe778c588000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff0eb719269 CR3=0000000040a24000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00524f52524500400000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000